b, &(0x7f0000000680)=""/155, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x10, 0x8000000, 0x3f}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r1, r1], &(0x7f0000000800)=[{0x1, 0x2, 0xa, 0x1}, {0x4, 0x5, 0xb, 0x2}, {0x0, 0x1, 0x2, 0x3}, {0x1, 0x2, 0x9, 0x2}], 0x10, 0x9}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@cgroup=r1, 0x1d, 0x0, 0x79cf, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@ifindex=r2, r0, 0x33, 0x2, r3, @prog_fd=r4, r5}, 0x20) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1c, 0x0, 0x6, 0x80000000, 0x1484, r1, 0x6, '\x00', 0x0, r1, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff7f000000000000ffffff7f18210000", @ANYRES32=r0, @ANYBLOB="00000000050000a4171f660000000000"], &(0x7f0000000100)='syzkaller\x00', 0x80000001, 0x41, &(0x7f0000000140)=""/65, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xf, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r7, r1], 0x0, 0x10, 0xd0c}, 0x90) 05:20:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x0) 05:20:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0x6e, &(0x7f00000024c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f00000023c0)=""/197, 0xc5}], 0x7, &(0x7f0000002540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x40000101) write$cgroup_int(r3, &(0x7f00000001c0)=0x5777, 0x12) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:04 executing program 0: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0x6e, &(0x7f00000024c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f00000023c0)=""/197, 0xc5}], 0x7, &(0x7f0000002540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x40000101) write$cgroup_int(r3, &(0x7f00000001c0)=0x5777, 0x12) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0x6e, &(0x7f00000024c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f00000023c0)=""/197, 0xc5}], 0x7, &(0x7f0000002540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x40000101) write$cgroup_int(r3, &(0x7f00000001c0)=0x5777, 0x12) (async) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xaf8}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x9, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0x8c, 0x2fc00}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0xb, 0x4}, {0x0, 0x4, 0x9, 0x8}], 0x10, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000014c0)={r2, 0x0, 0xc2, 0x0, &(0x7f00000013c0)="a20bdba232dbae440cec23a771e78d43e557641cf4eba87518b22bb576a3caf4ad38f725a2373954c92e67ff5b9ef6bda59171794ec056bc0082b2d04e7efb7bfbc4a2750e54d7ba1023d98350c6314536787a8ad1d59f6fcefed25966667633f6e9d2fac9ed03b1d981bd68baa5d397c7bcf4bea2b7174abb9b78f0811bd11301e6abe621e205ec9222c6f9b35b77f0da6c09c34cdc08ac9732675683178dcb67a36b5ffd49e01f6903496647730c425b3c9dce7ac429bd47f3e66ed5991a320bda", 0x0, 0x7, 0x0, 0x4a, 0x0, &(0x7f0000000300)="3469ada9c2c8d61684a51df9d4602a41b5c9006c1a7add1e6a984f76bb09e0c6fefe9e3ddf9c17223dd3077cdad96596d6191cd2a8fb55056ee9988f0c8c2a061077d71199c33c35fa24", 0x0, 0x2, 0x0, 0x24}, 0x50) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="ea00000000637075202d626c6b696f202b637075202b63707520"], 0x1a) 05:20:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xaf8}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x9, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0x8c, 0x2fc00}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0xb, 0x4}, {0x0, 0x4, 0x9, 0x8}], 0x10, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000014c0)={r2, 0x0, 0xc2, 0x0, &(0x7f00000013c0)="a20bdba232dbae440cec23a771e78d43e557641cf4eba87518b22bb576a3caf4ad38f725a2373954c92e67ff5b9ef6bda59171794ec056bc0082b2d04e7efb7bfbc4a2750e54d7ba1023d98350c6314536787a8ad1d59f6fcefed25966667633f6e9d2fac9ed03b1d981bd68baa5d397c7bcf4bea2b7174abb9b78f0811bd11301e6abe621e205ec9222c6f9b35b77f0da6c09c34cdc08ac9732675683178dcb67a36b5ffd49e01f6903496647730c425b3c9dce7ac429bd47f3e66ed5991a320bda", 0x0, 0x7, 0x0, 0x4a, 0x0, &(0x7f0000000300)="3469ada9c2c8d61684a51df9d4602a41b5c9006c1a7add1e6a984f76bb09e0c6fefe9e3ddf9c17223dd3077cdad96596d6191cd2a8fb55056ee9988f0c8c2a061077d71199c33c35fa24", 0x0, 0x2, 0x0, 0x24}, 0x50) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="ea00000000637075202d626c6b696f202b637075202b63707520"], 0x1a) 05:20:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x0) 05:20:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xaf8}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x9, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0x8c, 0x2fc00}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0xb, 0x4}, {0x0, 0x4, 0x9, 0x8}], 0x10, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000014c0)={r2, 0x0, 0xc2, 0x0, &(0x7f00000013c0)="a20bdba232dbae440cec23a771e78d43e557641cf4eba87518b22bb576a3caf4ad38f725a2373954c92e67ff5b9ef6bda59171794ec056bc0082b2d04e7efb7bfbc4a2750e54d7ba1023d98350c6314536787a8ad1d59f6fcefed25966667633f6e9d2fac9ed03b1d981bd68baa5d397c7bcf4bea2b7174abb9b78f0811bd11301e6abe621e205ec9222c6f9b35b77f0da6c09c34cdc08ac9732675683178dcb67a36b5ffd49e01f6903496647730c425b3c9dce7ac429bd47f3e66ed5991a320bda", 0x0, 0x7, 0x0, 0x4a, 0x0, &(0x7f0000000300)="3469ada9c2c8d61684a51df9d4602a41b5c9006c1a7add1e6a984f76bb09e0c6fefe9e3ddf9c17223dd3077cdad96596d6191cd2a8fb55056ee9988f0c8c2a061077d71199c33c35fa24", 0x0, 0x2, 0x0, 0x24}, 0x50) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="ea00000000637075202d626c6b696f202b637075202b63707520"], 0x1a) 05:20:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0xfebf, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0], 0x0, 0xd, &(0x7f0000000e80)=[{}], 0x8, 0x10, &(0x7f0000000ec0), &(0x7f0000001140), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @struct={0xb, 0x1, 0x0, 0x4, 0x0, 0x80000001, [{0xd, 0x2, 0x4}]}]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x61, 0x61, 0x61, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000016c0)=""/250, 0x48, 0xfa}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001800)={0x20, 0x0}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001840)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xb, 0x16, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000d40)='syzkaller\x00', 0x7f, 0xea, &(0x7f0000001040)=""/234, 0x41100, 0x59, '\x00', r1, 0x1a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, &(0x7f0000001880)=[r0], 0x0, 0x10, 0x80000001}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f00000002c0), &(0x7f0000000300)=""/111, 0x0, 0x0, 0x8, r0}, 0x38) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x2, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x85ffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2c, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @exit]}, 0x0, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@map_fd, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x2e, &(0x7f0000000180)=""/46, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r7], 0x0, 0x10, 0xc3e7}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x9, 0x11, &(0x7f0000001180)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0x430, 0x63, &(0x7f0000001280)=""/99, 0x41100, 0xb, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x1, 0x5, 0x6a9, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000014c0)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000001500)=[{0x2, 0x1, 0x0, 0xc}, {0x1, 0x4, 0x3, 0xc}, {0x2, 0x1, 0x5}, {0x5, 0x3, 0xd, 0xe}]}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x5c, 0x18}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x32e7, 0x0, 0x0, 0x0, 0x10001}, [@generic={0x3f, 0xf, 0x5, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x3}, @exit, @tail_call, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @tail_call]}, &(0x7f0000000600)='syzkaller\x00', 0x1, 0xfd, &(0x7f0000000700)=""/253, 0x41100, 0x10, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x3, 0x5, 0xfc000000}, 0x10, 0x0, r8, 0x5, &(0x7f0000000980)=[r9, r10], &(0x7f00000009c0)=[{0x4, 0x5, 0xa}, {0x2, 0x5, 0xc, 0x8}, {0x2, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xf, 0x7}, {0x4, 0x2, 0x4, 0x6}], 0x10, 0x3}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x10, 0x2d, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x67}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x80, 0x21, &(0x7f00000003c0)=""/33, 0x41100, 0x0, '\x00', 0x0, 0x2f, r11, 0x8, &(0x7f0000000e40)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r11, 0x2, &(0x7f0000000f00)=[0xffffffffffffffff, r9], &(0x7f0000000f40)=[{0x3, 0x1, 0x0, 0x3}, {0x3, 0x2, 0xd}], 0x10, 0x3}, 0x90) r12 = getpid() syz_open_procfs$namespace(r12, &(0x7f0000000480)='ns/pid\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$sock(r11, &(0x7f0000000980)={&(0x7f0000000180)=@xdp={0x2c, 0x0, r13, 0xe}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)="17551d27ee78fc76e3c9bc019f72a8c54d9ecd5dd43a01bab00a7b0aa4e2caa451736c40db60c67f10c053eb0ca2b85a0a4b426445c66f392170a6ab566cc14afc15771658167a6beecca68aa68909a262fbbbcdaf2b52503b16e8e19a15fb4114c76503092a345ca9add61bfe2a58399ec67e9bf9864d2dd6f8313506ca25121eb48a3d78", 0x85}, {&(0x7f00000003c0)="f76894c958473b95fa819b65d886afabaaeada6f31320905792afe46d79a64062e431d4cd831f04b87ca4ac2cd238788acbccee8778d8d5605acdef1690dc511f394a871f026dd2c1a3d173ac0ff1880465e1d39b1ee52d92a4b4b6e39c2174f65dc7cb92c16a94083431533", 0x6c}, {&(0x7f0000000440)="9bbc77d70ca3a6d8419731677d7cd833d04e88815004439c1f16ec45d0f3e97e57eb93934ecbe378a9d546aa8785d6440ab25b24100a895b26c27d1cc4a98f0624fe77c4ff18", 0x46}, {&(0x7f00000004c0)="20fb8bdf17c49696760f02d68d456f5f4dea67f9c691405e8dc7ba6b436a2a3c009204718b90c55214913f9f1267f25ad2bc9c5a64bfa2e38f6f9419b7bb35233b2bc35c5655e621726baac4b04a8ac9cda03aab41deb543e7ecca5db9576f68e2becb2147136b648d53e965a2986e0bed94a5ac24338a1699abafcc9868e064b62ec2181534d5a7c2f7d7fe", 0x8c}, {&(0x7f0000000580)="2df686be1cb6e64a4b62f902acfe083878e60962315b024ef7fbc1b1c0856ee3a4ba51a2b1d798e12f2d0441c8ca590f50d0ebbe050c4a2640e4a19cca071bc3f9b2c1ab36c351d6c268812acb9d6e2d56aadb8a1b229853557a9c19b975c5ee494cf7261786e18e4a51b1d11939f7beed09c7c43f824f10c2026d20f84bfc4524a1a23deb", 0x85}, {&(0x7f0000000640)="c02a22dafd545cca87b46b115572c20724274ac85adeeb2f78daceefd8ac8c4a765c909be482dc0c44ce3efc78bb2a3eb3a4e35aa1bc6f16406e7e8f0823c68e089218160131729487df45b692c1bc49a4108d7670e7c3fad1649d8c7b4c9a64a77a7634837b9dda83d25298afd7599034c36fc7adf6f0a17f2b35c9bb9e6361ac9f", 0x82}, {&(0x7f0000000700)="c930afa4e181c4361afd5241b3f6c35bf3399d33fa816f3ab70baef8e1d531e3f38e735dcfb9987a4c3b9f0f724b5019f9baa5961b1bae8c2994d3d2fdb38a13589472c8a590b315448962c95611f31af27b9a4794c2164a1a3b199ab498d5caa8c89f1895986560da9d30f327cd6bfd30e33841311efae5d0c9ebcc39d97ac39f233ddc560920b9c4bf0bd149ab73df40f17be173fa3b043ff11af3b7bb98943d579505be855674aef196fdd281a1a66dde03cec1eb03a507c24f3c2a68e3729af6fb363cfa5ea6ccb95d051794eea446a1d1e271463f7d23011ad76cca", 0xde}, {&(0x7f0000000800)="11fffb63690f180c12ec7838ba1647ea6ef8ad3f6fadfc6e793d20a458897e692c13ddaaee9220108584d41749b8de2854fa7d441c2c0514cf41392d7e547db362a27ff1c6a2b74e236f3c4cca3ad37c619a60f17565bdadd75238bb2118e882da1f5cc5dd33c4c1ff3b95cad5b296b0ddc2684f63ad69fb8ed4c5c359bdf1222af38151f6f4724d6932145c66595b388b6d5a6a38493cf8bbcc5ef8689635564034092df0240730f60acf6ed6a481df621df09e0140e30b9a8174537377114d6e4726bcfd155d9d9347958fd0740e5a2ca1e1fce59cdd553c3be8", 0xdb}], 0x8, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x4748}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}, 0x20010801) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_int(r14, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r15, &(0x7f0000000200), 0x43400) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r16, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:05 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000540), 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 05:20:05 executing program 0: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0xfebf, 0x1, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0], 0x0, 0xd, &(0x7f0000000e80)=[{}], 0x8, 0x10, &(0x7f0000000ec0), &(0x7f0000001140), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @struct={0xb, 0x1, 0x0, 0x4, 0x0, 0x80000001, [{0xd, 0x2, 0x4}]}]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x61, 0x61, 0x61, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000016c0)=""/250, 0x48, 0xfa}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001800)={0x20, 0x0}, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001840)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xb, 0x16, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000d40)='syzkaller\x00', 0x7f, 0xea, &(0x7f0000001040)=""/234, 0x41100, 0x59, '\x00', r1, 0x1a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, &(0x7f0000001880)=[r0], 0x0, 0x10, 0x80000001}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f00000002c0), &(0x7f0000000300)=""/111, 0x0, 0x0, 0x8, r0}, 0x38) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x2, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x85ffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2c, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @exit]}, 0x0, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@map_fd, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x2e, &(0x7f0000000180)=""/46, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r7], 0x0, 0x10, 0xc3e7}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x9, 0x11, &(0x7f0000001180)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0x430, 0x63, &(0x7f0000001280)=""/99, 0x41100, 0xb, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x1, 0x5, 0x6a9, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000014c0)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000001500)=[{0x2, 0x1, 0x0, 0xc}, {0x1, 0x4, 0x3, 0xc}, {0x2, 0x1, 0x5}, {0x5, 0x3, 0xd, 0xe}]}, 0x90) (rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r8}, 0x10) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x5c, 0x18}, 0xc) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x32e7, 0x0, 0x0, 0x0, 0x10001}, [@generic={0x3f, 0xf, 0x5, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x3}, @exit, @tail_call, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @tail_call]}, &(0x7f0000000600)='syzkaller\x00', 0x1, 0xfd, &(0x7f0000000700)=""/253, 0x41100, 0x10, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x3, 0x5, 0xfc000000}, 0x10, 0x0, r8, 0x5, &(0x7f0000000980)=[r9, r10], &(0x7f00000009c0)=[{0x4, 0x5, 0xa}, {0x2, 0x5, 0xc, 0x8}, {0x2, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xf, 0x7}, {0x4, 0x2, 0x4, 0x6}], 0x10, 0x3}, 0x90) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x10, 0x2d, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x67}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x80, 0x21, &(0x7f00000003c0)=""/33, 0x41100, 0x0, '\x00', 0x0, 0x2f, r11, 0x8, &(0x7f0000000e40)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r11, 0x2, &(0x7f0000000f00)=[0xffffffffffffffff, r9], &(0x7f0000000f40)=[{0x3, 0x1, 0x0, 0x3}, {0x3, 0x2, 0xd}], 0x10, 0x3}, 0x90) r12 = getpid() syz_open_procfs$namespace(r12, &(0x7f0000000480)='ns/pid\x00') (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$sock(r11, &(0x7f0000000980)={&(0x7f0000000180)=@xdp={0x2c, 0x0, r13, 0xe}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)="17551d27ee78fc76e3c9bc019f72a8c54d9ecd5dd43a01bab00a7b0aa4e2caa451736c40db60c67f10c053eb0ca2b85a0a4b426445c66f392170a6ab566cc14afc15771658167a6beecca68aa68909a262fbbbcdaf2b52503b16e8e19a15fb4114c76503092a345ca9add61bfe2a58399ec67e9bf9864d2dd6f8313506ca25121eb48a3d78", 0x85}, {&(0x7f00000003c0)="f76894c958473b95fa819b65d886afabaaeada6f31320905792afe46d79a64062e431d4cd831f04b87ca4ac2cd238788acbccee8778d8d5605acdef1690dc511f394a871f026dd2c1a3d173ac0ff1880465e1d39b1ee52d92a4b4b6e39c2174f65dc7cb92c16a94083431533", 0x6c}, {&(0x7f0000000440)="9bbc77d70ca3a6d8419731677d7cd833d04e88815004439c1f16ec45d0f3e97e57eb93934ecbe378a9d546aa8785d6440ab25b24100a895b26c27d1cc4a98f0624fe77c4ff18", 0x46}, {&(0x7f00000004c0)="20fb8bdf17c49696760f02d68d456f5f4dea67f9c691405e8dc7ba6b436a2a3c009204718b90c55214913f9f1267f25ad2bc9c5a64bfa2e38f6f9419b7bb35233b2bc35c5655e621726baac4b04a8ac9cda03aab41deb543e7ecca5db9576f68e2becb2147136b648d53e965a2986e0bed94a5ac24338a1699abafcc9868e064b62ec2181534d5a7c2f7d7fe", 0x8c}, {&(0x7f0000000580)="2df686be1cb6e64a4b62f902acfe083878e60962315b024ef7fbc1b1c0856ee3a4ba51a2b1d798e12f2d0441c8ca590f50d0ebbe050c4a2640e4a19cca071bc3f9b2c1ab36c351d6c268812acb9d6e2d56aadb8a1b229853557a9c19b975c5ee494cf7261786e18e4a51b1d11939f7beed09c7c43f824f10c2026d20f84bfc4524a1a23deb", 0x85}, {&(0x7f0000000640)="c02a22dafd545cca87b46b115572c20724274ac85adeeb2f78daceefd8ac8c4a765c909be482dc0c44ce3efc78bb2a3eb3a4e35aa1bc6f16406e7e8f0823c68e089218160131729487df45b692c1bc49a4108d7670e7c3fad1649d8c7b4c9a64a77a7634837b9dda83d25298afd7599034c36fc7adf6f0a17f2b35c9bb9e6361ac9f", 0x82}, {&(0x7f0000000700)="c930afa4e181c4361afd5241b3f6c35bf3399d33fa816f3ab70baef8e1d531e3f38e735dcfb9987a4c3b9f0f724b5019f9baa5961b1bae8c2994d3d2fdb38a13589472c8a590b315448962c95611f31af27b9a4794c2164a1a3b199ab498d5caa8c89f1895986560da9d30f327cd6bfd30e33841311efae5d0c9ebcc39d97ac39f233ddc560920b9c4bf0bd149ab73df40f17be173fa3b043ff11af3b7bb98943d579505be855674aef196fdd281a1a66dde03cec1eb03a507c24f3c2a68e3729af6fb363cfa5ea6ccb95d051794eea446a1d1e271463f7d23011ad76cca", 0xde}, {&(0x7f0000000800)="11fffb63690f180c12ec7838ba1647ea6ef8ad3f6fadfc6e793d20a458897e692c13ddaaee9220108584d41749b8de2854fa7d441c2c0514cf41392d7e547db362a27ff1c6a2b74e236f3c4cca3ad37c619a60f17565bdadd75238bb2118e882da1f5cc5dd33c4c1ff3b95cad5b296b0ddc2684f63ad69fb8ed4c5c359bdf1222af38151f6f4724d6932145c66595b388b6d5a6a38493cf8bbcc5ef8689635564034092df0240730f60acf6ed6a481df621df09e0140e30b9a8174537377114d6e4726bcfd155d9d9347958fd0740e5a2ca1e1fce59cdd553c3be8", 0xdb}], 0x8, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x4748}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}, 0x20010801) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_int(r14, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r15, &(0x7f0000000200), 0x43400) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r16, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0xfebf, 0x1, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0], 0x0, 0xd, &(0x7f0000000e80)=[{}], 0x8, 0x10, &(0x7f0000000ec0), &(0x7f0000001140), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @struct={0xb, 0x1, 0x0, 0x4, 0x0, 0x80000001, [{0xd, 0x2, 0x4}]}]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x61, 0x61, 0x61, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000016c0)=""/250, 0x48, 0xfa}, 0x20) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001800)={0x20, 0x0}, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001840)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xb, 0x16, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000d40)='syzkaller\x00', 0x7f, 0xea, &(0x7f0000001040)=""/234, 0x41100, 0x59, '\x00', r1, 0x1a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, &(0x7f0000001880)=[r0], 0x0, 0x10, 0x80000001}, 0x90) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f00000002c0), &(0x7f0000000300)=""/111, 0x0, 0x0, 0x8, r0}, 0x38) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x2, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x85ffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2c, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @exit]}, 0x0, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@map_fd, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x2e, &(0x7f0000000180)=""/46, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r7], 0x0, 0x10, 0xc3e7}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x9, 0x11, &(0x7f0000001180)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd], &(0x7f0000001240)='syzkaller\x00', 0x430, 0x63, &(0x7f0000001280)=""/99, 0x41100, 0xb, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x1, 0x5, 0x6a9, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000014c0)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000001500)=[{0x2, 0x1, 0x0, 0xc}, {0x1, 0x4, 0x3, 0xc}, {0x2, 0x1, 0x5}, {0x5, 0x3, 0xd, 0xe}]}, 0x90) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r8}, 0x10) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x5c, 0x18}, 0xc) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x32e7, 0x0, 0x0, 0x0, 0x10001}, [@generic={0x3f, 0xf, 0x5, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x3}, @exit, @tail_call, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @tail_call]}, &(0x7f0000000600)='syzkaller\x00', 0x1, 0xfd, &(0x7f0000000700)=""/253, 0x41100, 0x10, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x3, 0x5, 0xfc000000}, 0x10, 0x0, r8, 0x5, &(0x7f0000000980)=[r9, r10], &(0x7f00000009c0)=[{0x4, 0x5, 0xa}, {0x2, 0x5, 0xc, 0x8}, {0x2, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xf, 0x7}, {0x4, 0x2, 0x4, 0x6}], 0x10, 0x3}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x10, 0x2d, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x67}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x80, 0x21, &(0x7f00000003c0)=""/33, 0x41100, 0x0, '\x00', 0x0, 0x2f, r11, 0x8, &(0x7f0000000e40)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r11, 0x2, &(0x7f0000000f00)=[0xffffffffffffffff, r9], &(0x7f0000000f40)=[{0x3, 0x1, 0x0, 0x3}, {0x3, 0x2, 0xd}], 0x10, 0x3}, 0x90) (async) r12 = getpid() syz_open_procfs$namespace(r12, &(0x7f0000000480)='ns/pid\x00') (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$sock(r11, &(0x7f0000000980)={&(0x7f0000000180)=@xdp={0x2c, 0x0, r13, 0xe}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)="17551d27ee78fc76e3c9bc019f72a8c54d9ecd5dd43a01bab00a7b0aa4e2caa451736c40db60c67f10c053eb0ca2b85a0a4b426445c66f392170a6ab566cc14afc15771658167a6beecca68aa68909a262fbbbcdaf2b52503b16e8e19a15fb4114c76503092a345ca9add61bfe2a58399ec67e9bf9864d2dd6f8313506ca25121eb48a3d78", 0x85}, {&(0x7f00000003c0)="f76894c958473b95fa819b65d886afabaaeada6f31320905792afe46d79a64062e431d4cd831f04b87ca4ac2cd238788acbccee8778d8d5605acdef1690dc511f394a871f026dd2c1a3d173ac0ff1880465e1d39b1ee52d92a4b4b6e39c2174f65dc7cb92c16a94083431533", 0x6c}, {&(0x7f0000000440)="9bbc77d70ca3a6d8419731677d7cd833d04e88815004439c1f16ec45d0f3e97e57eb93934ecbe378a9d546aa8785d6440ab25b24100a895b26c27d1cc4a98f0624fe77c4ff18", 0x46}, {&(0x7f00000004c0)="20fb8bdf17c49696760f02d68d456f5f4dea67f9c691405e8dc7ba6b436a2a3c009204718b90c55214913f9f1267f25ad2bc9c5a64bfa2e38f6f9419b7bb35233b2bc35c5655e621726baac4b04a8ac9cda03aab41deb543e7ecca5db9576f68e2becb2147136b648d53e965a2986e0bed94a5ac24338a1699abafcc9868e064b62ec2181534d5a7c2f7d7fe", 0x8c}, {&(0x7f0000000580)="2df686be1cb6e64a4b62f902acfe083878e60962315b024ef7fbc1b1c0856ee3a4ba51a2b1d798e12f2d0441c8ca590f50d0ebbe050c4a2640e4a19cca071bc3f9b2c1ab36c351d6c268812acb9d6e2d56aadb8a1b229853557a9c19b975c5ee494cf7261786e18e4a51b1d11939f7beed09c7c43f824f10c2026d20f84bfc4524a1a23deb", 0x85}, {&(0x7f0000000640)="c02a22dafd545cca87b46b115572c20724274ac85adeeb2f78daceefd8ac8c4a765c909be482dc0c44ce3efc78bb2a3eb3a4e35aa1bc6f16406e7e8f0823c68e089218160131729487df45b692c1bc49a4108d7670e7c3fad1649d8c7b4c9a64a77a7634837b9dda83d25298afd7599034c36fc7adf6f0a17f2b35c9bb9e6361ac9f", 0x82}, {&(0x7f0000000700)="c930afa4e181c4361afd5241b3f6c35bf3399d33fa816f3ab70baef8e1d531e3f38e735dcfb9987a4c3b9f0f724b5019f9baa5961b1bae8c2994d3d2fdb38a13589472c8a590b315448962c95611f31af27b9a4794c2164a1a3b199ab498d5caa8c89f1895986560da9d30f327cd6bfd30e33841311efae5d0c9ebcc39d97ac39f233ddc560920b9c4bf0bd149ab73df40f17be173fa3b043ff11af3b7bb98943d579505be855674aef196fdd281a1a66dde03cec1eb03a507c24f3c2a68e3729af6fb363cfa5ea6ccb95d051794eea446a1d1e271463f7d23011ad76cca", 0xde}, {&(0x7f0000000800)="11fffb63690f180c12ec7838ba1647ea6ef8ad3f6fadfc6e793d20a458897e692c13ddaaee9220108584d41749b8de2854fa7d441c2c0514cf41392d7e547db362a27ff1c6a2b74e236f3c4cca3ad37c619a60f17565bdadd75238bb2118e882da1f5cc5dd33c4c1ff3b95cad5b296b0ddc2684f63ad69fb8ed4c5c359bdf1222af38151f6f4724d6932145c66595b388b6d5a6a38493cf8bbcc5ef8689635564034092df0240730f60acf6ed6a481df621df09e0140e30b9a8174537377114d6e4726bcfd155d9d9347958fd0740e5a2ca1e1fce59cdd553c3be8", 0xdb}], 0x8, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x4748}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}, 0x20010801) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_int(r14, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r15, &(0x7f0000000200), 0x43400) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r16, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x9) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x8}, 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r6, r0, 0x1, 0x4, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x2}, 0x90) r11 = openat$cgroup_ro(r3, &(0x7f0000000c00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x876}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x401, 0x19, &(0x7f0000000b80)=""/25, 0x41000, 0x29, '\x00', r10, 0x1c, r2, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x6ae0, r1, 0x3, &(0x7f0000000c40)=[0x1, r5, r2, r0, r4, r11], &(0x7f0000000c80)=[{0x2, 0x1, 0x6, 0x2}, {0x3, 0x3, 0xf, 0xa}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0x80000000}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x52}], &(0x7f0000000400)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x0, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[0xffffffffffffffff, r7], &(0x7f0000000940)=[{0x5, 0x3, 0x4, 0x3}, {0x0, 0x4, 0x0, 0x9}, {}, {0x0, 0x1, 0x4, 0x8}, {0x0, 0x1, 0x7, 0x7}, {0x0, 0x1, 0x6, 0x7}], 0x10, 0x7}, 0x90) write$cgroup_type(r0, &(0x7f0000000580), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4bb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x4c, &(0x7f00000002c0)=""/76, 0x40f00, 0x10, '\x00', r6, 0x8, r4, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x0, 0x4, 0x7f}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f0000000500)=[{0x3, 0x4, 0xe, 0x4}, {0x4, 0x1, 0xd, 0x1}, {0x4, 0x4, 0x9, 0x8}], 0x10, 0xf6}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000020000800000018133d00", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x2d) r13 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) 05:20:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000240), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x40, 0x7, 0x1, 0x3, 0x0, 0x1ff, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7fff, 0x100}, 0x2008, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:05 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x9) (async, rerun: 64) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) (rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000040), 0x9) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x8}, 0x48) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r6, r0, 0x1, 0x4, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x2}, 0x90) (async) r11 = openat$cgroup_ro(r3, &(0x7f0000000c00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x876}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x401, 0x19, &(0x7f0000000b80)=""/25, 0x41000, 0x29, '\x00', r10, 0x1c, r2, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x6ae0, r1, 0x3, &(0x7f0000000c40)=[0x1, r5, r2, r0, r4, r11], &(0x7f0000000c80)=[{0x2, 0x1, 0x6, 0x2}, {0x3, 0x3, 0xf, 0xa}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0x80000000}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x52}], &(0x7f0000000400)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x0, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[0xffffffffffffffff, r7], &(0x7f0000000940)=[{0x5, 0x3, 0x4, 0x3}, {0x0, 0x4, 0x0, 0x9}, {}, {0x0, 0x1, 0x4, 0x8}, {0x0, 0x1, 0x7, 0x7}, {0x0, 0x1, 0x6, 0x7}], 0x10, 0x7}, 0x90) (async) write$cgroup_type(r0, &(0x7f0000000580), 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4bb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x4c, &(0x7f00000002c0)=""/76, 0x40f00, 0x10, '\x00', r6, 0x8, r4, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x0, 0x4, 0x7f}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f0000000500)=[{0x3, 0x4, 0xe, 0x4}, {0x4, 0x1, 0xd, 0x1}, {0x4, 0x4, 0x9, 0x8}], 0x10, 0xf6}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000020000800000018133d00", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x2d) r13 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) 05:20:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x40, 0x7, 0x1, 0x3, 0x0, 0x1ff, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7fff, 0x100}, 0x2008, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (rerun: 32) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r1, &(0x7f0000000000), 0x9) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) (async, rerun: 64) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x8}, 0x48) (async, rerun: 32) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r6, r0, 0x1, 0x4, 0x2}, 0x48) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x2}, 0x90) (async, rerun: 64) r11 = openat$cgroup_ro(r3, &(0x7f0000000c00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x876}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x401, 0x19, &(0x7f0000000b80)=""/25, 0x41000, 0x29, '\x00', r10, 0x1c, r2, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x6ae0, r1, 0x3, &(0x7f0000000c40)=[0x1, r5, r2, r0, r4, r11], &(0x7f0000000c80)=[{0x2, 0x1, 0x6, 0x2}, {0x3, 0x3, 0xf, 0xa}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0x80000000}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x52}], &(0x7f0000000400)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x0, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[0xffffffffffffffff, r7], &(0x7f0000000940)=[{0x5, 0x3, 0x4, 0x3}, {0x0, 0x4, 0x0, 0x9}, {}, {0x0, 0x1, 0x4, 0x8}, {0x0, 0x1, 0x7, 0x7}, {0x0, 0x1, 0x6, 0x7}], 0x10, 0x7}, 0x90) (async, rerun: 32) write$cgroup_type(r0, &(0x7f0000000580), 0x9) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4bb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x4c, &(0x7f00000002c0)=""/76, 0x40f00, 0x10, '\x00', r6, 0x8, r4, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x0, 0x4, 0x7f}, 0x10, 0xffffffffffffffff, r0, 0x3, 0x0, &(0x7f0000000500)=[{0x3, 0x4, 0xe, 0x4}, {0x4, 0x1, 0xd, 0x1}, {0x4, 0x4, 0x9, 0x8}], 0x10, 0xf6}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000020000800000018133d00", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x2d) (async) r13 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) 05:20:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'io'}, {0x2b, 'net'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}]}, 0x18) 05:20:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'io'}, {0x2b, 'net'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}]}, 0x18) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'io'}, {0x2b, 'net'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}]}, 0x18) 05:20:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 1) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'io'}, {0x2b, 'net'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}]}, 0x18) [ 2038.104906][T11797] FAULT_INJECTION: forcing a failure. [ 2038.104906][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.130477][T11797] CPU: 0 PID: 11797 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2038.140637][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2038.150534][T11797] Call Trace: [ 2038.153654][T11797] [ 2038.156432][T11797] dump_stack_lvl+0x151/0x1b7 [ 2038.160950][T11797] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2038.166421][T11797] dump_stack+0x15/0x17 [ 2038.170408][T11797] should_fail+0x3c6/0x510 [ 2038.174665][T11797] __should_failslab+0xa4/0xe0 [ 2038.179259][T11797] ? dup_task_struct+0x53/0xc60 [ 2038.183946][T11797] should_failslab+0x9/0x20 [ 2038.188287][T11797] slab_pre_alloc_hook+0x37/0xd0 [ 2038.193060][T11797] ? dup_task_struct+0x53/0xc60 [ 2038.197750][T11797] kmem_cache_alloc+0x44/0x200 [ 2038.202356][T11797] dup_task_struct+0x53/0xc60 [ 2038.206863][T11797] ? __kasan_check_write+0x14/0x20 [ 2038.211814][T11797] copy_process+0x5c4/0x3290 [ 2038.216240][T11797] ? __kasan_check_write+0x14/0x20 [ 2038.221184][T11797] ? proc_fail_nth_write+0x20b/0x290 [ 2038.226301][T11797] ? selinux_file_permission+0x2c4/0x570 [ 2038.231772][T11797] ? fsnotify_perm+0x6a/0x5d0 [ 2038.236289][T11797] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2038.241236][T11797] ? vfs_write+0x9ec/0x1110 [ 2038.245574][T11797] kernel_clone+0x21e/0x9e0 [ 2038.249911][T11797] ? file_end_write+0x1c0/0x1c0 [ 2038.254599][T11797] ? create_io_thread+0x1e0/0x1e0 [ 2038.259457][T11797] ? mutex_unlock+0xb2/0x260 [ 2038.263887][T11797] ? __mutex_lock_slowpath+0x10/0x10 [ 2038.269007][T11797] __x64_sys_clone+0x23f/0x290 [ 2038.273605][T11797] ? __do_sys_vfork+0x130/0x130 [ 2038.278292][T11797] ? ksys_write+0x260/0x2c0 [ 2038.282805][T11797] ? debug_smp_processor_id+0x17/0x20 [ 2038.288012][T11797] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2038.293916][T11797] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2038.299386][T11797] do_syscall_64+0x3d/0xb0 05:20:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2038.303636][T11797] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2038.309363][T11797] RIP: 0033:0x7f424505ada9 [ 2038.313615][T11797] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2038.333060][T11797] RSP: 002b:00007f4243ddc078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2038.341303][T11797] RAX: ffffffffffffffda RBX: 00007f4245188f80 RCX: 00007f424505ada9 05:20:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) write$cgroup_int(r2, &(0x7f0000000280)=0xfffffffffffeffff, 0x12) openat$cgroup_ro(r2, &(0x7f00000002c0)='io.stat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x16, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000000040)='syzkaller\x00', 0x65e, 0xc3, &(0x7f0000000840)=""/195, 0x41100, 0x40, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x9, 0x7fff, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[r0, r0], &(0x7f0000000700)=[{0x3, 0x1, 0x3, 0x3}, {0x0, 0x2, 0x8, 0x7}, {0x2, 0x3, 0xb, 0x3}, {0x0, 0x2, 0xf, 0x2}, {0x5, 0x4, 0x8, 0xb}, {0x0, 0x3, 0x5, 0xd}, {0x2, 0x5, 0x3, 0x1}, {0x0, 0x2, 0x0, 0x7}], 0x10, 0x9}, 0x90) 05:20:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 1) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2038.349120][T11797] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2038.356933][T11797] RBP: 00007f4243ddc120 R08: 0000000000000000 R09: 0000000000000000 [ 2038.364736][T11797] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2038.372551][T11797] R13: 000000000000000b R14: 00007f4245188f80 R15: 00007ffe60013b18 [ 2038.380368][T11797] [ 2038.429754][T11810] FAULT_INJECTION: forcing a failure. [ 2038.429754][T11810] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.442885][T11810] CPU: 0 PID: 11810 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2038.453035][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2038.462931][T11810] Call Trace: [ 2038.466052][T11810] [ 2038.468833][T11810] dump_stack_lvl+0x151/0x1b7 [ 2038.473345][T11810] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2038.478814][T11810] dump_stack+0x15/0x17 [ 2038.482805][T11810] should_fail+0x3c6/0x510 [ 2038.487058][T11810] __should_failslab+0xa4/0xe0 [ 2038.491658][T11810] ? dup_task_struct+0x53/0xc60 [ 2038.496344][T11810] should_failslab+0x9/0x20 [ 2038.500688][T11810] slab_pre_alloc_hook+0x37/0xd0 [ 2038.505461][T11810] ? dup_task_struct+0x53/0xc60 [ 2038.510146][T11810] kmem_cache_alloc+0x44/0x200 [ 2038.514748][T11810] dup_task_struct+0x53/0xc60 [ 2038.519265][T11810] ? __kasan_check_write+0x14/0x20 [ 2038.524206][T11810] copy_process+0x5c4/0x3290 05:20:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2038.528634][T11810] ? __kasan_check_write+0x14/0x20 [ 2038.533580][T11810] ? proc_fail_nth_write+0x20b/0x290 [ 2038.538703][T11810] ? selinux_file_permission+0x2c4/0x570 [ 2038.544167][T11810] ? fsnotify_perm+0x6a/0x5d0 [ 2038.548687][T11810] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2038.553631][T11810] ? vfs_write+0x9ec/0x1110 [ 2038.557971][T11810] kernel_clone+0x21e/0x9e0 [ 2038.562310][T11810] ? file_end_write+0x1c0/0x1c0 [ 2038.566996][T11810] ? create_io_thread+0x1e0/0x1e0 [ 2038.571855][T11810] ? mutex_unlock+0xb2/0x260 [ 2038.576281][T11810] ? __mutex_lock_slowpath+0x10/0x10 [ 2038.581405][T11810] __x64_sys_clone+0x23f/0x290 [ 2038.586003][T11810] ? __do_sys_vfork+0x130/0x130 [ 2038.590691][T11810] ? ksys_write+0x260/0x2c0 [ 2038.595034][T11810] ? debug_smp_processor_id+0x17/0x20 [ 2038.600236][T11810] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2038.606144][T11810] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2038.611608][T11810] do_syscall_64+0x3d/0xb0 [ 2038.615861][T11810] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2038.621589][T11810] RIP: 0033:0x7f3c5e561da9 [ 2038.625842][T11810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2038.645285][T11810] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2038.653529][T11810] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2038.661342][T11810] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2038.669150][T11810] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async, rerun: 64) write$cgroup_int(r2, &(0x7f0000000280)=0xfffffffffffeffff, 0x12) openat$cgroup_ro(r2, &(0x7f00000002c0)='io.stat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x16, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000000040)='syzkaller\x00', 0x65e, 0xc3, &(0x7f0000000840)=""/195, 0x41100, 0x40, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x9, 0x7fff, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[r0, r0], &(0x7f0000000700)=[{0x3, 0x1, 0x3, 0x3}, {0x0, 0x2, 0x8, 0x7}, {0x2, 0x3, 0xb, 0x3}, {0x0, 0x2, 0xf, 0x2}, {0x5, 0x4, 0x8, 0xb}, {0x0, 0x3, 0x5, 0xd}, {0x2, 0x5, 0x3, 0x1}, {0x0, 0x2, 0x0, 0x7}], 0x10, 0x9}, 0x90) 05:20:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 2) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2038.676963][T11810] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2038.684774][T11810] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2038.692591][T11810] [ 2038.710505][T11815] FAULT_INJECTION: forcing a failure. [ 2038.710505][T11815] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.725001][T11815] CPU: 0 PID: 11815 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2038.735151][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2038.745049][T11815] Call Trace: [ 2038.748174][T11815] [ 2038.750949][T11815] dump_stack_lvl+0x151/0x1b7 [ 2038.755467][T11815] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2038.760930][T11815] ? __kasan_slab_alloc+0xc3/0xe0 [ 2038.765791][T11815] ? __kasan_slab_alloc+0xb1/0xe0 [ 2038.770654][T11815] ? slab_post_alloc_hook+0x53/0x2c0 [ 2038.775771][T11815] ? dup_task_struct+0x53/0xc60 [ 2038.780460][T11815] ? copy_process+0x5c4/0x3290 [ 2038.785052][T11815] ? kernel_clone+0x21e/0x9e0 [ 2038.789567][T11815] dump_stack+0x15/0x17 [ 2038.793560][T11815] should_fail+0x3c6/0x510 [ 2038.797812][T11815] __should_failslab+0xa4/0xe0 [ 2038.802411][T11815] should_failslab+0x9/0x20 [ 2038.806750][T11815] slab_pre_alloc_hook+0x37/0xd0 [ 2038.811526][T11815] kmem_cache_alloc_trace+0x48/0x210 [ 2038.816647][T11815] ? __get_vm_area_node+0x117/0x360 [ 2038.821682][T11815] __get_vm_area_node+0x117/0x360 [ 2038.826542][T11815] __vmalloc_node_range+0xe2/0x8d0 [ 2038.831488][T11815] ? copy_process+0x5c4/0x3290 [ 2038.836090][T11815] ? slab_post_alloc_hook+0x72/0x2c0 [ 2038.841225][T11815] ? dup_task_struct+0x53/0xc60 [ 2038.845896][T11815] ? dup_task_struct+0x53/0xc60 [ 2038.850583][T11815] dup_task_struct+0x416/0xc60 [ 2038.855185][T11815] ? copy_process+0x5c4/0x3290 [ 2038.859784][T11815] ? __kasan_check_write+0x14/0x20 [ 2038.864730][T11815] copy_process+0x5c4/0x3290 [ 2038.869160][T11815] ? __kasan_check_write+0x14/0x20 [ 2038.874102][T11815] ? proc_fail_nth_write+0x20b/0x290 [ 2038.879224][T11815] ? selinux_file_permission+0x2c4/0x570 [ 2038.884692][T11815] ? fsnotify_perm+0x6a/0x5d0 [ 2038.889208][T11815] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2038.894155][T11815] ? vfs_write+0x9ec/0x1110 [ 2038.898496][T11815] kernel_clone+0x21e/0x9e0 [ 2038.902833][T11815] ? file_end_write+0x1c0/0x1c0 [ 2038.907522][T11815] ? create_io_thread+0x1e0/0x1e0 [ 2038.912381][T11815] ? mutex_unlock+0xb2/0x260 [ 2038.916806][T11815] ? __mutex_lock_slowpath+0x10/0x10 [ 2038.921930][T11815] __x64_sys_clone+0x23f/0x290 [ 2038.926527][T11815] ? __do_sys_vfork+0x130/0x130 [ 2038.931213][T11815] ? ksys_write+0x260/0x2c0 [ 2038.935557][T11815] ? debug_smp_processor_id+0x17/0x20 [ 2038.940773][T11815] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2038.946664][T11815] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2038.952133][T11815] do_syscall_64+0x3d/0xb0 [ 2038.956383][T11815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2038.962111][T11815] RIP: 0033:0x7f424505ada9 [ 2038.966368][T11815] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2038.985806][T11815] RSP: 002b:00007f4243ddc078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2038.994051][T11815] RAX: ffffffffffffffda RBX: 00007f4245188f80 RCX: 00007f424505ada9 [ 2039.001863][T11815] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2039.009674][T11815] RBP: 00007f4243ddc120 R08: 0000000000000000 R09: 0000000000000000 [ 2039.017488][T11815] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 05:20:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) write$cgroup_int(r2, &(0x7f0000000280)=0xfffffffffffeffff, 0x12) (async) openat$cgroup_ro(r2, &(0x7f00000002c0)='io.stat\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x16, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000000040)='syzkaller\x00', 0x65e, 0xc3, &(0x7f0000000840)=""/195, 0x41100, 0x40, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x9, 0x7fff, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[r0, r0], &(0x7f0000000700)=[{0x3, 0x1, 0x3, 0x3}, {0x0, 0x2, 0x8, 0x7}, {0x2, 0x3, 0xb, 0x3}, {0x0, 0x2, 0xf, 0x2}, {0x5, 0x4, 0x8, 0xb}, {0x0, 0x3, 0x5, 0xd}, {0x2, 0x5, 0x3, 0x1}, {0x0, 0x2, 0x0, 0x7}], 0x10, 0x9}, 0x90) (rerun: 64) [ 2039.025298][T11815] R13: 000000000000000b R14: 00007f4245188f80 R15: 00007ffe60013b18 [ 2039.033112][T11815] 05:20:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:06 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1b) 05:20:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async, rerun: 32) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1b) 05:20:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1b) 05:20:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 2) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2039.234231][T11962] FAULT_INJECTION: forcing a failure. [ 2039.234231][T11962] name failslab, interval 1, probability 0, space 0, times 0 [ 2039.236655][T11815] syz-executor.0: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 2039.268535][T11815] CPU: 1 PID: 11815 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2039.278684][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2039.288578][T11815] Call Trace: [ 2039.291701][T11815] [ 2039.294479][T11815] dump_stack_lvl+0x151/0x1b7 [ 2039.298993][T11815] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2039.304461][T11815] ? pr_cont_kernfs_name+0xf0/0x100 [ 2039.309493][T11815] dump_stack+0x15/0x17 [ 2039.313487][T11815] warn_alloc+0x21a/0x390 [ 2039.317652][T11815] ? should_failslab+0x9/0x20 [ 2039.322167][T11815] ? zone_watermark_ok_safe+0x270/0x270 [ 2039.327550][T11815] ? __get_vm_area_node+0x347/0x360 [ 2039.332584][T11815] __vmalloc_node_range+0x2c1/0x8d0 [ 2039.337616][T11815] ? slab_post_alloc_hook+0x72/0x2c0 [ 2039.342737][T11815] ? dup_task_struct+0x53/0xc60 [ 2039.347423][T11815] ? dup_task_struct+0x53/0xc60 [ 2039.352122][T11815] dup_task_struct+0x416/0xc60 [ 2039.356712][T11815] ? copy_process+0x5c4/0x3290 [ 2039.361313][T11815] ? __kasan_check_write+0x14/0x20 [ 2039.366261][T11815] copy_process+0x5c4/0x3290 [ 2039.370687][T11815] ? __kasan_check_write+0x14/0x20 [ 2039.375631][T11815] ? proc_fail_nth_write+0x20b/0x290 [ 2039.380753][T11815] ? selinux_file_permission+0x2c4/0x570 [ 2039.386219][T11815] ? fsnotify_perm+0x6a/0x5d0 [ 2039.390734][T11815] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2039.395684][T11815] ? vfs_write+0x9ec/0x1110 [ 2039.400021][T11815] kernel_clone+0x21e/0x9e0 [ 2039.404361][T11815] ? file_end_write+0x1c0/0x1c0 [ 2039.409050][T11815] ? create_io_thread+0x1e0/0x1e0 [ 2039.413906][T11815] ? mutex_unlock+0xb2/0x260 [ 2039.418333][T11815] ? __mutex_lock_slowpath+0x10/0x10 [ 2039.423453][T11815] __x64_sys_clone+0x23f/0x290 [ 2039.428056][T11815] ? __do_sys_vfork+0x130/0x130 [ 2039.432742][T11815] ? ksys_write+0x260/0x2c0 [ 2039.437082][T11815] ? debug_smp_processor_id+0x17/0x20 [ 2039.442290][T11815] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2039.448191][T11815] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2039.453661][T11815] do_syscall_64+0x3d/0xb0 [ 2039.457912][T11815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2039.463639][T11815] RIP: 0033:0x7f424505ada9 [ 2039.467895][T11815] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2039.487334][T11815] RSP: 002b:00007f4243ddc078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2039.495579][T11815] RAX: ffffffffffffffda RBX: 00007f4245188f80 RCX: 00007f424505ada9 [ 2039.503390][T11815] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2039.511201][T11815] RBP: 00007f4243ddc120 R08: 0000000000000000 R09: 0000000000000000 [ 2039.519015][T11815] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2039.526824][T11815] R13: 000000000000000b R14: 00007f4245188f80 R15: 00007ffe60013b18 [ 2039.534639][T11815] [ 2039.538185][T11962] CPU: 1 PID: 11962 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2039.548355][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2039.558270][T11962] Call Trace: [ 2039.561370][T11962] [ 2039.564148][T11962] dump_stack_lvl+0x151/0x1b7 [ 2039.568664][T11962] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2039.574128][T11962] ? __kasan_slab_alloc+0xc3/0xe0 [ 2039.578992][T11962] ? __kasan_slab_alloc+0xb1/0xe0 [ 2039.583855][T11962] ? slab_post_alloc_hook+0x53/0x2c0 [ 2039.588971][T11962] ? dup_task_struct+0x53/0xc60 [ 2039.593656][T11962] ? copy_process+0x5c4/0x3290 [ 2039.598256][T11962] ? kernel_clone+0x21e/0x9e0 [ 2039.602770][T11962] dump_stack+0x15/0x17 [ 2039.606761][T11962] should_fail+0x3c6/0x510 [ 2039.611018][T11962] __should_failslab+0xa4/0xe0 [ 2039.615615][T11962] should_failslab+0x9/0x20 [ 2039.619955][T11962] slab_pre_alloc_hook+0x37/0xd0 [ 2039.624732][T11962] kmem_cache_alloc_trace+0x48/0x210 [ 2039.629850][T11962] ? __get_vm_area_node+0x117/0x360 [ 2039.634887][T11962] __get_vm_area_node+0x117/0x360 [ 2039.639747][T11962] __vmalloc_node_range+0xe2/0x8d0 [ 2039.644701][T11962] ? copy_process+0x5c4/0x3290 [ 2039.649297][T11962] ? slab_post_alloc_hook+0x72/0x2c0 [ 2039.654415][T11962] ? dup_task_struct+0x53/0xc60 [ 2039.659103][T11962] dup_task_struct+0x416/0xc60 [ 2039.663699][T11962] ? copy_process+0x5c4/0x3290 [ 2039.668300][T11962] ? __kasan_check_write+0x14/0x20 [ 2039.673246][T11962] copy_process+0x5c4/0x3290 [ 2039.677675][T11962] ? __kasan_check_write+0x14/0x20 [ 2039.682618][T11962] ? proc_fail_nth_write+0x20b/0x290 [ 2039.687786][T11962] ? selinux_file_permission+0x2c4/0x570 [ 2039.693209][T11962] ? fsnotify_perm+0x6a/0x5d0 [ 2039.697734][T11962] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2039.702673][T11962] ? vfs_write+0x9ec/0x1110 [ 2039.707012][T11962] kernel_clone+0x21e/0x9e0 [ 2039.711355][T11962] ? file_end_write+0x1c0/0x1c0 [ 2039.716037][T11962] ? create_io_thread+0x1e0/0x1e0 [ 2039.720898][T11962] ? mutex_unlock+0xb2/0x260 [ 2039.725336][T11962] ? __mutex_lock_slowpath+0x10/0x10 [ 2039.730445][T11962] __x64_sys_clone+0x23f/0x290 [ 2039.735045][T11962] ? __do_sys_vfork+0x130/0x130 [ 2039.739731][T11962] ? ksys_write+0x260/0x2c0 [ 2039.744080][T11962] ? debug_smp_processor_id+0x17/0x20 [ 2039.749279][T11962] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2039.755190][T11962] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2039.760649][T11962] do_syscall_64+0x3d/0xb0 [ 2039.764902][T11962] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2039.770632][T11962] RIP: 0033:0x7f3c5e561da9 [ 2039.774883][T11962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2039.794323][T11962] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2039.802570][T11962] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2039.810379][T11962] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2039.818191][T11962] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2039.826005][T11962] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2039.833816][T11962] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2039.841631][T11962] [ 2039.845089][T11815] Mem-Info: [ 2039.864724][T11815] active_anon:12950 inactive_anon:150462 isolated_anon:0 [ 2039.864724][T11815] active_file:9013 inactive_file:10315 isolated_file:0 [ 2039.864724][T11815] unevictable:0 dirty:41 writeback:0 05:20:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0)="16ab2f518783384f874c9cc233ffce801a5d9146772c6b6a2e", &(0x7f00000003c0)=""/4096}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\b\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x1a) openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) 05:20:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 3) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0)="16ab2f518783384f874c9cc233ffce801a5d9146772c6b6a2e", &(0x7f00000003c0)=""/4096}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x12) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) openat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) (async) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\b\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x1a) openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) [ 2039.864724][T11815] slab_reclaimable:16598 slab_unreclaimable:119455 [ 2039.864724][T11815] mapped:104797 shmem:12988 pagetables:1293 bounce:0 [ 2039.864724][T11815] kernel_misc_reclaimable:0 [ 2039.864724][T11815] free:1245352 free_pcp:31876 free_cma:0 [ 2039.894615][T11973] FAULT_INJECTION: forcing a failure. [ 2039.894615][T11973] name failslab, interval 1, probability 0, space 0, times 0 05:20:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0)="16ab2f518783384f874c9cc233ffce801a5d9146772c6b6a2e", &(0x7f00000003c0)=""/4096}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\b\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x1a) openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000001c0)="16ab2f518783384f874c9cc233ffce801a5d9146772c6b6a2e", &(0x7f00000003c0)=""/4096}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) openat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)) (async) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\b\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x1a) (async) openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) 05:20:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002120702500000000002020207b1af8ff00000000bfa100000000000008000000b703000000000000850000009c0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x4, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net'}]}, 0x5) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) [ 2039.906675][T11815] Node 0 active_anon:51812kB inactive_anon:601820kB active_file:36076kB inactive_file:41860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:419736kB dirty:736kB writeback:92kB shmem:51964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9760kB pagetables:5212kB all_unreclaimable? no [ 2039.950075][T11815] DMA32 free:2950296kB min:62592kB low:78240kB high:93888kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2981436kB mlocked:0kB bounce:0kB free_pcp:21932kB local_pcp:2840kB free_cma:0kB [ 2039.974726][T11973] CPU: 0 PID: 11973 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2039.977445][T11815] lowmem_reserve[]: [ 2039.987410][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2039.987422][T11973] Call Trace: [ 2039.987428][T11973] [ 2039.987434][T11973] dump_stack_lvl+0x151/0x1b7 [ 2039.991054][T11815] 0 3941 [ 2040.000951][T11973] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2040.000973][T11973] dump_stack+0x15/0x17 [ 2040.004074][T11815] 3941 [ 2040.006851][T11973] should_fail+0x3c6/0x510 [ 2040.006872][T11973] __should_failslab+0xa4/0xe0 [ 2040.011364][T11815] Normal free:2029696kB min:84860kB low:106072kB high:127284kB reserved_highatomic:0KB active_anon:51812kB inactive_anon:601920kB active_file:36076kB inactive_file:43860kB unevictable:0kB writepending:2852kB present:5242880kB managed:4035848kB mlocked:0kB bounce:0kB free_pcp:103456kB local_pcp:52936kB free_cma:0kB [ 2040.014140][T11973] ? alloc_vmap_area+0x19e/0x1a80 [ 2040.019620][T11815] lowmem_reserve[]: [ 2040.023603][T11973] should_failslab+0x9/0x20 [ 2040.026204][T11815] 0 0 [ 2040.030457][T11973] slab_pre_alloc_hook+0x37/0xd0 05:20:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002120702500000000002020207b1af8ff00000000bfa100000000000008000000b703000000000000850000009c0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x4, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net'}]}, 0x5) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) [ 2040.030477][T11973] ? alloc_vmap_area+0x19e/0x1a80 [ 2040.030491][T11973] kmem_cache_alloc+0x44/0x200 [ 2040.030507][T11973] alloc_vmap_area+0x19e/0x1a80 [ 2040.030527][T11973] ? vm_map_ram+0xa90/0xa90 [ 2040.037384][T11815] 0 [ 2040.064400][T11973] ? kmem_cache_alloc_trace+0x115/0x210 [ 2040.064427][T11973] ? __get_vm_area_node+0x117/0x360 [ 2040.064445][T11973] __get_vm_area_node+0x158/0x360 [ 2040.064461][T11973] __vmalloc_node_range+0xe2/0x8d0 [ 2040.064477][T11973] ? copy_process+0x5c4/0x3290 [ 2040.071055][T11815] [ 2040.072904][T11973] ? slab_post_alloc_hook+0x72/0x2c0 05:20:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002120702500000000002020207b1af8ff00000000bfa100000000000008000000b703000000000000850000009c0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x4, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net'}]}, 0x5) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net'}]}, 0x5) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 05:20:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x7f, 0x747dd405, 0x2, 0x2900, 0x1, 0x878, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xc, 0x4, 0xb, 0xffffffffffffffc0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x7, &(0x7f0000000280)=""/7, 0x41100, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x8, 0x5, 0x200}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r3, r0, r0, r1, r1, r1, r0, r0, r0], &(0x7f00000004c0)=[{0x5, 0x5, 0xa, 0x8}, {0x4, 0x5, 0x2}, {0x1, 0x5, 0x8, 0x3}], 0x10, 0x9a}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2040.072932][T11973] ? dup_task_struct+0x53/0xc60 [ 2040.072955][T11973] dup_task_struct+0x416/0xc60 [ 2040.072974][T11973] ? copy_process+0x5c4/0x3290 [ 2040.072993][T11973] ? __kasan_check_write+0x14/0x20 [ 2040.073019][T11973] copy_process+0x5c4/0x3290 [ 2040.073040][T11973] ? __kasan_check_write+0x14/0x20 [ 2040.073056][T11973] ? proc_fail_nth_write+0x20b/0x290 [ 2040.077809][T11815] DMA32: [ 2040.079864][T11973] ? selinux_file_permission+0x2c4/0x570 [ 2040.079889][T11973] ? fsnotify_perm+0x6a/0x5d0 [ 2040.079911][T11973] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2040.079932][T11973] ? vfs_write+0x9ec/0x1110 [ 2040.084967][T11815] 322*4kB [ 2040.089501][T11973] kernel_clone+0x21e/0x9e0 [ 2040.089523][T11973] ? file_end_write+0x1c0/0x1c0 [ 2040.089540][T11973] ? create_io_thread+0x1e0/0x1e0 [ 2040.089556][T11973] ? mutex_unlock+0xb2/0x260 [ 2040.089574][T11973] ? __mutex_lock_slowpath+0x10/0x10 [ 2040.089592][T11973] __x64_sys_clone+0x23f/0x290 [ 2040.089612][T11973] ? __do_sys_vfork+0x130/0x130 [ 2040.089629][T11973] ? ksys_write+0x260/0x2c0 [ 2040.089647][T11973] ? debug_smp_processor_id+0x17/0x20 05:20:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 4) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2040.089664][T11973] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2040.089685][T11973] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2040.089704][T11973] do_syscall_64+0x3d/0xb0 [ 2040.089720][T11973] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2040.089740][T11973] RIP: 0033:0x7f3c5e561da9 [ 2040.089756][T11973] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2040.089771][T11973] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2040.089791][T11973] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2040.089804][T11973] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2040.089816][T11973] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2040.089828][T11973] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2040.089839][T11973] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2040.089855][T11973] [ 2040.288274][T12006] FAULT_INJECTION: forcing a failure. [ 2040.288274][T12006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2040.294615][T11815] (UM) [ 2040.316198][T12006] CPU: 0 PID: 12006 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2040.325132][T11815] 310*8kB [ 2040.331452][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2040.331465][T12006] Call Trace: [ 2040.331471][T12006] [ 2040.331478][T12006] dump_stack_lvl+0x151/0x1b7 [ 2040.334317][T11815] (UM) 310*16kB [ 2040.347338][T12006] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2040.347358][T12006] ? arch_stack_walk+0xf3/0x140 [ 2040.349945][T11815] (UM) 316*32kB [ 2040.360097][T12006] dump_stack+0x15/0x17 [ 2040.360114][T12006] should_fail+0x3c6/0x510 [ 2040.362961][T11815] (UM) 306*64kB [ 2040.372857][T12006] should_fail_alloc_page+0x5a/0x80 [ 2040.372877][T12006] prepare_alloc_pages+0x15c/0x700 [ 2040.372896][T12006] ? __alloc_pages_bulk+0xe40/0xe40 [ 2040.375978][T11815] (UM) 429*128kB [ 2040.378760][T12006] __alloc_pages+0x18c/0x8f0 [ 2040.383271][T11815] (UM) 424*256kB [ 2040.386654][T12006] ? do_syscall_64+0x3d/0xb0 [ 2040.392122][T11815] (UM) 298*512kB [ 2040.396812][T12006] ? prep_new_page+0x110/0x110 [ 2040.400195][T11815] (UM) 271*1024kB [ 2040.404194][T12006] __get_free_pages+0x10/0x30 [ 2040.408449][T11815] (UM) [ 2040.411827][T12006] kasan_populate_vmalloc_pte+0x39/0x130 [ 2040.416879][T11815] 256*2048kB [ 2040.421805][T12006] ? __apply_to_page_range+0x8ca/0xbe0 [ 2040.426850][T11815] (UM) [ 2040.430312][T12006] __apply_to_page_range+0x8dd/0xbe0 [ 2040.434737][T11815] 438*4096kB [ 2040.438212][T12006] ? kasan_populate_vmalloc+0x70/0x70 [ 2040.442636][T11815] (UM) = 2950296kB [ 2040.446113][T12006] ? kasan_populate_vmalloc+0x70/0x70 [ 2040.450719][T11815] Normal: [ 2040.454266][T12006] apply_to_page_range+0x3b/0x50 [ 2040.458795][T11815] 19550*4kB [ 2040.461385][T12006] kasan_populate_vmalloc+0x65/0x70 [ 2040.467345][T11815] (UME) [ 2040.469978][T12006] alloc_vmap_area+0x192f/0x1a80 [ 2040.475271][T11815] 6240*8kB [ 2040.477884][T12006] ? vm_map_ram+0xa90/0xa90 [ 2040.477912][T12006] ? kmem_cache_alloc_trace+0x115/0x210 [ 2040.483041][T11815] (UME) [ 2040.486119][T12006] ? __get_vm_area_node+0x117/0x360 [ 2040.486139][T12006] __get_vm_area_node+0x158/0x360 [ 2040.491361][T11815] 3681*16kB [ 2040.494890][T12006] __vmalloc_node_range+0xe2/0x8d0 [ 2040.500136][T11815] (UME) [ 2040.502958][T12006] ? copy_process+0x5c4/0x3290 [ 2040.507768][T11815] 1660*32kB [ 2040.510769][T12006] ? slab_post_alloc_hook+0x72/0x2c0 [ 2040.515802][T11815] (UME) 552*64kB [ 2040.518496][T12006] ? dup_task_struct+0x53/0xc60 [ 2040.518516][T12006] dup_task_struct+0x416/0xc60 [ 2040.518532][T12006] ? copy_process+0x5c4/0x3290 [ 2040.518548][T12006] ? __kasan_check_write+0x14/0x20 [ 2040.525634][T11815] (UME) [ 2040.526222][T12006] copy_process+0x5c4/0x3290 [ 2040.530727][T11815] 97*128kB [ 2040.535943][T12006] ? __kasan_check_write+0x14/0x20 [ 2040.538794][T11815] (UME) [ 2040.543664][T12006] ? proc_fail_nth_write+0x20b/0x290 [ 2040.548720][T11815] 11*256kB [ 2040.551564][T12006] ? selinux_file_permission+0x2c4/0x570 [ 2040.556510][T11815] (UME) 46*512kB [ 2040.559202][T12006] ? fsnotify_perm+0x6a/0x5d0 [ 2040.559224][T12006] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2040.564189][T11815] (UME) [ 2040.566839][T12006] ? vfs_write+0x9ec/0x1110 [ 2040.566862][T12006] kernel_clone+0x21e/0x9e0 [ 2040.566879][T12006] ? file_end_write+0x1c0/0x1c0 [ 2040.566893][T12006] ? create_io_thread+0x1e0/0x1e0 [ 2040.566909][T12006] ? mutex_unlock+0xb2/0x260 [ 2040.581128][T11815] 310*1024kB [ 2040.584721][T12006] ? __mutex_lock_slowpath+0x10/0x10 [ 2040.589780][T11815] (UM) [ 2040.594268][T12006] __x64_sys_clone+0x23f/0x290 [ 2040.594295][T12006] ? __do_sys_vfork+0x130/0x130 [ 2040.594314][T12006] ? ksys_write+0x260/0x2c0 05:20:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 5) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2040.597455][T11815] 165*2048kB [ 2040.601387][T12006] ? debug_smp_processor_id+0x17/0x20 [ 2040.601411][T12006] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2040.601434][T12006] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2040.604712][T11815] (UME) [ 2040.609284][T12006] do_syscall_64+0x3d/0xb0 [ 2040.609310][T12006] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2040.609332][T12006] RIP: 0033:0x7f3c5e561da9 [ 2040.609348][T12006] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2040.612692][T11815] 259*4096kB [ 2040.617095][T12006] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2040.617117][T12006] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2040.617130][T12006] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2040.617142][T12006] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2040.617152][T12006] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2040.617162][T12006] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2040.617179][T12006] [ 2040.737623][T12008] FAULT_INJECTION: forcing a failure. [ 2040.737623][T12008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2040.745192][T11815] (U) [ 2040.762421][T12008] CPU: 0 PID: 12008 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2040.764342][T11815] = 2030472kB [ 2040.771885][T12008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2040.771898][T12008] Call Trace: [ 2040.771904][T12008] [ 2040.771910][T12008] dump_stack_lvl+0x151/0x1b7 [ 2040.779704][T11815] 37780 total pagecache pages [ 2040.787507][T12008] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2040.795319][T11815] 0 pages in swap cache [ 2040.798185][T12008] dump_stack+0x15/0x17 [ 2040.798212][T12008] should_fail+0x3c6/0x510 [ 2040.811281][T11815] Swap cache stats: add 0, delete 0, find 0/0 [ 2040.813716][T12008] should_fail_alloc_page+0x5a/0x80 [ 2040.823886][T11815] Free swap = 124996kB [ 2040.826994][T12008] prepare_alloc_pages+0x15c/0x700 [ 2040.836898][T11815] Total swap = 124996kB [ 2040.840011][T12008] ? __alloc_pages+0x8f0/0x8f0 [ 2040.842789][T11815] 2097051 pages RAM [ 2040.847304][T12008] ? __alloc_pages_bulk+0xe40/0xe40 [ 2040.851814][T11815] 0 pages HighMem/MovableOnly [ 2040.851822][T11815] 342730 pages reserved [ 2040.857286][T12008] __alloc_pages+0x18c/0x8f0 [ 2040.857304][T12008] ? do_syscall_64+0x3d/0xb0 [ 2040.857320][T12008] ? prep_new_page+0x110/0x110 [ 2040.857336][T12008] ? __kasan_check_write+0x14/0x20 [ 2040.857357][T12008] __get_free_pages+0x10/0x30 [ 2040.857372][T12008] kasan_populate_vmalloc_pte+0x39/0x130 [ 2040.861309][T11815] 0 pages cma reserved [ 2040.865267][T12008] ? __apply_to_page_range+0x8ca/0xbe0 [ 2040.865289][T12008] __apply_to_page_range+0x8dd/0xbe0 [ 2040.960040][T12008] ? kasan_populate_vmalloc+0x70/0x70 [ 2040.965242][T12008] ? kasan_populate_vmalloc+0x70/0x70 [ 2040.970449][T12008] apply_to_page_range+0x3b/0x50 [ 2040.975225][T12008] kasan_populate_vmalloc+0x65/0x70 [ 2040.980256][T12008] alloc_vmap_area+0x192f/0x1a80 [ 2040.985038][T12008] ? vm_map_ram+0xa90/0xa90 [ 2040.989371][T12008] ? kmem_cache_alloc_trace+0x115/0x210 [ 2040.994752][T12008] ? __get_vm_area_node+0x117/0x360 [ 2040.999786][T12008] __get_vm_area_node+0x158/0x360 [ 2041.004650][T12008] __vmalloc_node_range+0xe2/0x8d0 [ 2041.009593][T12008] ? copy_process+0x5c4/0x3290 [ 2041.014194][T12008] ? slab_post_alloc_hook+0x72/0x2c0 [ 2041.019318][T12008] ? dup_task_struct+0x53/0xc60 [ 2041.024001][T12008] dup_task_struct+0x416/0xc60 [ 2041.028601][T12008] ? copy_process+0x5c4/0x3290 [ 2041.033201][T12008] ? __kasan_check_write+0x14/0x20 [ 2041.038151][T12008] copy_process+0x5c4/0x3290 [ 2041.042575][T12008] ? __kasan_check_write+0x14/0x20 [ 2041.047522][T12008] ? proc_fail_nth_write+0x20b/0x290 [ 2041.052643][T12008] ? selinux_file_permission+0x2c4/0x570 [ 2041.058113][T12008] ? fsnotify_perm+0x6a/0x5d0 [ 2041.062627][T12008] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2041.067572][T12008] ? vfs_write+0x9ec/0x1110 [ 2041.071914][T12008] kernel_clone+0x21e/0x9e0 [ 2041.076252][T12008] ? file_end_write+0x1c0/0x1c0 [ 2041.080938][T12008] ? create_io_thread+0x1e0/0x1e0 [ 2041.085798][T12008] ? mutex_unlock+0xb2/0x260 [ 2041.090225][T12008] ? __mutex_lock_slowpath+0x10/0x10 [ 2041.095348][T12008] __x64_sys_clone+0x23f/0x290 [ 2041.099947][T12008] ? __do_sys_vfork+0x130/0x130 [ 2041.104632][T12008] ? ksys_write+0x260/0x2c0 [ 2041.108973][T12008] ? debug_smp_processor_id+0x17/0x20 [ 2041.114183][T12008] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2041.120081][T12008] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2041.125550][T12008] do_syscall_64+0x3d/0xb0 [ 2041.129802][T12008] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2041.135530][T12008] RIP: 0033:0x7f3c5e561da9 [ 2041.139785][T12008] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2041.159231][T12008] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2041.167471][T12008] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2041.175282][T12008] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2041.183095][T12008] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) 05:20:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x7f, 0x747dd405, 0x2, 0x2900, 0x1, 0x878, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xc, 0x4, 0xb, 0xffffffffffffffc0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x7, &(0x7f0000000280)=""/7, 0x41100, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x8, 0x5, 0x200}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r3, r0, r0, r1, r1, r1, r0, r0, r0], &(0x7f00000004c0)=[{0x5, 0x5, 0xa, 0x8}, {0x4, 0x5, 0x2}, {0x1, 0x5, 0x8, 0x3}], 0x10, 0x9a}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 6) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2041.190905][T12008] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2041.198716][T12008] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2041.206534][T12008] 05:20:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x7f, 0x747dd405, 0x2, 0x2900, 0x1, 0x878, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xc, 0x4, 0xb, 0xffffffffffffffc0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x7, &(0x7f0000000280)=""/7, 0x41100, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x8, 0x5, 0x200}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r3, r0, r0, r1, r1, r1, r0, r0, r0], &(0x7f00000004c0)=[{0x5, 0x5, 0xa, 0x8}, {0x4, 0x5, 0x2}, {0x1, 0x5, 0x8, 0x3}], 0x10, 0x9a}, 0x90) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:08 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2041.283513][T12018] FAULT_INJECTION: forcing a failure. [ 2041.283513][T12018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2041.300188][T12018] CPU: 0 PID: 12018 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2041.310344][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2041.320237][T12018] Call Trace: [ 2041.323362][T12018] [ 2041.326139][T12018] dump_stack_lvl+0x151/0x1b7 05:20:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x0, 0x7, 0x7, 0x0, 0xfc, 0x1044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xb368, 0x0, @perf_config_ext={0x4, 0x7fffffff}, 0x40, 0x3, 0x5, 0x5, 0x7, 0xfffff13d, 0xc9d1, 0x0, 0x0, 0x0, 0x4a}, 0xffffffffffffffff, 0x10, r0, 0x1) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x40, 0x1, 0x3f, 0x81, 0x0, 0x4, 0x2, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x19728, 0x1, 0x401, 0x3, 0x9, 0x1d, 0x1, 0x0, 0x87, 0x0, 0xfffffffffffffff8}, r0, 0xa, r1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2041.330650][T12018] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2041.336150][T12018] dump_stack+0x15/0x17 [ 2041.340112][T12018] should_fail+0x3c6/0x510 [ 2041.344370][T12018] should_fail_alloc_page+0x5a/0x80 [ 2041.349399][T12018] prepare_alloc_pages+0x15c/0x700 [ 2041.354348][T12018] ? __alloc_pages+0x8f0/0x8f0 [ 2041.358948][T12018] ? __alloc_pages_bulk+0xe40/0xe40 [ 2041.363987][T12018] __alloc_pages+0x18c/0x8f0 [ 2041.368409][T12018] ? do_syscall_64+0x3d/0xb0 [ 2041.372835][T12018] ? prep_new_page+0x110/0x110 [ 2041.377434][T12018] ? __kasan_check_write+0x14/0x20 [ 2041.382385][T12018] __get_free_pages+0x10/0x30 [ 2041.386905][T12018] kasan_populate_vmalloc_pte+0x39/0x130 [ 2041.392361][T12018] ? __apply_to_page_range+0x8ca/0xbe0 [ 2041.397677][T12018] __apply_to_page_range+0x8dd/0xbe0 [ 2041.402782][T12018] ? kasan_populate_vmalloc+0x70/0x70 [ 2041.407990][T12018] ? kasan_populate_vmalloc+0x70/0x70 [ 2041.413368][T12018] apply_to_page_range+0x3b/0x50 [ 2041.418144][T12018] kasan_populate_vmalloc+0x65/0x70 [ 2041.423176][T12018] alloc_vmap_area+0x192f/0x1a80 [ 2041.427952][T12018] ? vm_map_ram+0xa90/0xa90 [ 2041.432289][T12018] ? kmem_cache_alloc_trace+0x115/0x210 [ 2041.437670][T12018] ? __get_vm_area_node+0x117/0x360 [ 2041.442706][T12018] __get_vm_area_node+0x158/0x360 [ 2041.447567][T12018] __vmalloc_node_range+0xe2/0x8d0 [ 2041.452512][T12018] ? copy_process+0x5c4/0x3290 [ 2041.457110][T12018] ? slab_post_alloc_hook+0x72/0x2c0 [ 2041.462231][T12018] ? dup_task_struct+0x53/0xc60 [ 2041.466919][T12018] ? dup_task_struct+0x53/0xc60 [ 2041.471609][T12018] dup_task_struct+0x416/0xc60 [ 2041.476206][T12018] ? copy_process+0x5c4/0x3290 05:20:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x0, 0x7, 0x7, 0x0, 0xfc, 0x1044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xb368, 0x0, @perf_config_ext={0x4, 0x7fffffff}, 0x40, 0x3, 0x5, 0x5, 0x7, 0xfffff13d, 0xc9d1, 0x0, 0x0, 0x0, 0x4a}, 0xffffffffffffffff, 0x10, r0, 0x1) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x40, 0x1, 0x3f, 0x81, 0x0, 0x4, 0x2, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x19728, 0x1, 0x401, 0x3, 0x9, 0x1d, 0x1, 0x0, 0x87, 0x0, 0xfffffffffffffff8}, r0, 0xa, r1, 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2041.480807][T12018] ? __kasan_check_write+0x14/0x20 [ 2041.485753][T12018] copy_process+0x5c4/0x3290 [ 2041.490181][T12018] ? __kasan_check_write+0x14/0x20 [ 2041.495125][T12018] ? proc_fail_nth_write+0x20b/0x290 [ 2041.500245][T12018] ? selinux_file_permission+0x2c4/0x570 [ 2041.505720][T12018] ? fsnotify_perm+0x6a/0x5d0 [ 2041.510232][T12018] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2041.515178][T12018] ? vfs_write+0x9ec/0x1110 [ 2041.519518][T12018] kernel_clone+0x21e/0x9e0 [ 2041.523856][T12018] ? file_end_write+0x1c0/0x1c0 [ 2041.528545][T12018] ? create_io_thread+0x1e0/0x1e0 05:20:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x40, 0x0, 0x7, 0x7, 0x0, 0xfc, 0x1044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xb368, 0x0, @perf_config_ext={0x4, 0x7fffffff}, 0x40, 0x3, 0x5, 0x5, 0x7, 0xfffff13d, 0xc9d1, 0x0, 0x0, 0x0, 0x4a}, 0xffffffffffffffff, 0x10, r0, 0x1) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x40, 0x1, 0x3f, 0x81, 0x0, 0x4, 0x2, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x19728, 0x1, 0x401, 0x3, 0x9, 0x1d, 0x1, 0x0, 0x87, 0x0, 0xfffffffffffffff8}, r0, 0xa, r1, 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2041.533403][T12018] ? mutex_unlock+0xb2/0x260 [ 2041.537833][T12018] ? __mutex_lock_slowpath+0x10/0x10 [ 2041.543040][T12018] __x64_sys_clone+0x23f/0x290 [ 2041.547640][T12018] ? __do_sys_vfork+0x130/0x130 [ 2041.552322][T12018] ? ksys_write+0x260/0x2c0 [ 2041.556662][T12018] ? debug_smp_processor_id+0x17/0x20 [ 2041.561866][T12018] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2041.567771][T12018] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2041.573238][T12018] do_syscall_64+0x3d/0xb0 [ 2041.577487][T12018] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2041.583217][T12018] RIP: 0033:0x7f3c5e561da9 [ 2041.587473][T12018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2041.606916][T12018] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2041.615157][T12018] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2041.622969][T12018] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2041.630789][T12018] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2041.638592][T12018] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2041.646404][T12018] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2041.654222][T12018] 05:20:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 7) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041411, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2041.741593][T12057] FAULT_INJECTION: forcing a failure. [ 2041.741593][T12057] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.754620][T12057] CPU: 1 PID: 12057 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2041.764865][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2041.774758][T12057] Call Trace: [ 2041.777879][T12057] [ 2041.780655][T12057] dump_stack_lvl+0x151/0x1b7 [ 2041.785169][T12057] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2041.790639][T12057] dump_stack+0x15/0x17 [ 2041.794631][T12057] should_fail+0x3c6/0x510 [ 2041.798884][T12057] __should_failslab+0xa4/0xe0 [ 2041.803483][T12057] should_failslab+0x9/0x20 [ 2041.807821][T12057] slab_pre_alloc_hook+0x37/0xd0 [ 2041.812597][T12057] __kmalloc+0x6d/0x270 [ 2041.816599][T12057] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2041.821796][T12057] __vmalloc_node_range+0x2d6/0x8d0 [ 2041.826830][T12057] ? dup_task_struct+0x53/0xc60 [ 2041.831518][T12057] dup_task_struct+0x416/0xc60 [ 2041.836116][T12057] ? copy_process+0x5c4/0x3290 [ 2041.840716][T12057] ? __kasan_check_write+0x14/0x20 [ 2041.845663][T12057] copy_process+0x5c4/0x3290 [ 2041.850096][T12057] ? __kasan_check_write+0x14/0x20 [ 2041.855044][T12057] ? proc_fail_nth_write+0x20b/0x290 [ 2041.860160][T12057] ? selinux_file_permission+0x2c4/0x570 [ 2041.865626][T12057] ? fsnotify_perm+0x6a/0x5d0 [ 2041.870143][T12057] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2041.875087][T12057] ? vfs_write+0x9ec/0x1110 [ 2041.879428][T12057] kernel_clone+0x21e/0x9e0 [ 2041.883765][T12057] ? file_end_write+0x1c0/0x1c0 [ 2041.888452][T12057] ? create_io_thread+0x1e0/0x1e0 [ 2041.893312][T12057] ? mutex_unlock+0xb2/0x260 [ 2041.897741][T12057] ? __mutex_lock_slowpath+0x10/0x10 [ 2041.902864][T12057] __x64_sys_clone+0x23f/0x290 [ 2041.907465][T12057] ? __do_sys_vfork+0x130/0x130 [ 2041.912148][T12057] ? ksys_write+0x260/0x2c0 [ 2041.916490][T12057] ? debug_smp_processor_id+0x17/0x20 [ 2041.921693][T12057] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2041.928726][T12057] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2041.934194][T12057] do_syscall_64+0x3d/0xb0 [ 2041.938446][T12057] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2041.944176][T12057] RIP: 0033:0x7f3c5e561da9 [ 2041.948435][T12057] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2041.967869][T12057] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2041.976809][T12057] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2041.984620][T12057] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 8) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f00000002c0)=[{}, {}], 0xfffffffffffffdcd, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000740)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f00000005c0)=""/217, 0xd9, 0x0, &(0x7f00000006c0)=""/135, 0x87}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000005000000af9c000002000000183000000200001000a3781ce7cc9de5a8cc756c0374229c0f618f"], &(0x7f00000000c0)='GPL\x00', 0x401, 0x5e, &(0x7f0000000100)=""/94, 0x41000, 0x20, '\x00', r1, 0x28, r2, 0x8, &(0x7f0000000540)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x7}, 0x10, r3, r0, 0x4, 0x0, &(0x7f0000000800)=[{0x3, 0x4, 0xd, 0xb}, {0x0, 0x5, 0xd, 0xe}, {0x2, 0x2, 0xa, 0xa}, {0x2, 0x1, 0x3, 0x2}], 0x10, 0xffffffff}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2041.992430][T12057] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2042.000243][T12057] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2042.008053][T12057] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2042.015957][T12057] [ 2042.064408][T12069] FAULT_INJECTION: forcing a failure. [ 2042.064408][T12069] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.106613][T12069] CPU: 0 PID: 12069 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2042.116774][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2042.126668][T12069] Call Trace: [ 2042.129791][T12069] [ 2042.132570][T12069] dump_stack_lvl+0x151/0x1b7 [ 2042.137086][T12069] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2042.142550][T12069] ? _raw_spin_unlock+0x4d/0x70 [ 2042.147239][T12069] dump_stack+0x15/0x17 [ 2042.151228][T12069] should_fail+0x3c6/0x510 05:20:09 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x1, 0x4, 0x81, 0x0, 0x9, 0xc021, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7ff, 0x4}, 0x4, 0x401, 0x6, 0x1, 0x3, 0x3, 0x400, 0x0, 0x5b61, 0x0, 0x9f7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x7, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2042.155485][T12069] __should_failslab+0xa4/0xe0 [ 2042.160093][T12069] should_failslab+0x9/0x20 [ 2042.164421][T12069] slab_pre_alloc_hook+0x37/0xd0 [ 2042.169199][T12069] kmem_cache_alloc_trace+0x48/0x210 [ 2042.174315][T12069] ? alloc_ucounts+0x15c/0x500 [ 2042.178917][T12069] alloc_ucounts+0x15c/0x500 [ 2042.183345][T12069] ? prepare_creds+0x486/0x6a0 [ 2042.187943][T12069] copy_creds+0x344/0x630 [ 2042.192113][T12069] copy_process+0x7c3/0x3290 [ 2042.196537][T12069] ? __kasan_check_write+0x14/0x20 [ 2042.201482][T12069] ? proc_fail_nth_write+0x20b/0x290 [ 2042.206603][T12069] ? selinux_file_permission+0x2c4/0x570 [ 2042.212072][T12069] ? fsnotify_perm+0x6a/0x5d0 [ 2042.216587][T12069] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2042.221533][T12069] ? vfs_write+0x9ec/0x1110 [ 2042.225875][T12069] kernel_clone+0x21e/0x9e0 [ 2042.230212][T12069] ? file_end_write+0x1c0/0x1c0 [ 2042.234898][T12069] ? create_io_thread+0x1e0/0x1e0 [ 2042.239760][T12069] ? mutex_unlock+0xb2/0x260 [ 2042.244190][T12069] ? __mutex_lock_slowpath+0x10/0x10 [ 2042.249309][T12069] __x64_sys_clone+0x23f/0x290 [ 2042.253912][T12069] ? __do_sys_vfork+0x130/0x130 [ 2042.258593][T12069] ? ksys_write+0x260/0x2c0 [ 2042.262937][T12069] ? debug_smp_processor_id+0x17/0x20 [ 2042.268138][T12069] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2042.274037][T12069] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2042.279506][T12069] do_syscall_64+0x3d/0xb0 [ 2042.283760][T12069] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2042.289488][T12069] RIP: 0033:0x7f3c5e561da9 [ 2042.293741][T12069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2042.313181][T12069] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2042.321427][T12069] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2042.329237][T12069] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2042.337050][T12069] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2042.344861][T12069] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 05:20:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 9) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:10 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2042.352672][T12069] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2042.360490][T12069] 05:20:10 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x1, 0x4, 0x81, 0x0, 0x9, 0xc021, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7ff, 0x4}, 0x4, 0x401, 0x6, 0x1, 0x3, 0x3, 0x400, 0x0, 0x5b61, 0x0, 0x9f7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x7, r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2042.440394][T12082] FAULT_INJECTION: forcing a failure. [ 2042.440394][T12082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2042.459983][T12082] CPU: 1 PID: 12082 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2042.470139][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2042.480034][T12082] Call Trace: [ 2042.483160][T12082] [ 2042.485936][T12082] dump_stack_lvl+0x151/0x1b7 [ 2042.490449][T12082] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2042.495917][T12082] ? __stack_depot_save+0x34/0x470 [ 2042.500865][T12082] dump_stack+0x15/0x17 [ 2042.504850][T12082] should_fail+0x3c6/0x510 [ 2042.509107][T12082] should_fail_alloc_page+0x5a/0x80 [ 2042.514139][T12082] prepare_alloc_pages+0x15c/0x700 [ 2042.519087][T12082] ? __alloc_pages+0x8f0/0x8f0 [ 2042.523690][T12082] ? __alloc_pages_bulk+0xe40/0xe40 [ 2042.528722][T12082] __alloc_pages+0x18c/0x8f0 [ 2042.533148][T12082] ? prep_new_page+0x110/0x110 [ 2042.537750][T12082] ? __kasan_kmalloc+0x9/0x10 [ 2042.542268][T12082] ? __kmalloc+0x13a/0x270 [ 2042.546515][T12082] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2042.551721][T12082] __vmalloc_node_range+0x482/0x8d0 [ 2042.557712][T12082] dup_task_struct+0x416/0xc60 [ 2042.562309][T12082] ? copy_process+0x5c4/0x3290 [ 2042.566909][T12082] ? __kasan_check_write+0x14/0x20 [ 2042.571856][T12082] copy_process+0x5c4/0x3290 [ 2042.576285][T12082] ? __kasan_check_write+0x14/0x20 [ 2042.581230][T12082] ? proc_fail_nth_write+0x20b/0x290 [ 2042.586350][T12082] ? selinux_file_permission+0x2c4/0x570 [ 2042.591818][T12082] ? fsnotify_perm+0x6a/0x5d0 [ 2042.596335][T12082] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2042.601281][T12082] ? vfs_write+0x9ec/0x1110 [ 2042.605620][T12082] kernel_clone+0x21e/0x9e0 [ 2042.609958][T12082] ? file_end_write+0x1c0/0x1c0 [ 2042.614647][T12082] ? create_io_thread+0x1e0/0x1e0 [ 2042.619507][T12082] ? mutex_unlock+0xb2/0x260 [ 2042.623932][T12082] ? __mutex_lock_slowpath+0x10/0x10 [ 2042.629058][T12082] __x64_sys_clone+0x23f/0x290 [ 2042.633654][T12082] ? __do_sys_vfork+0x130/0x130 [ 2042.638338][T12082] ? ksys_write+0x260/0x2c0 [ 2042.642681][T12082] ? debug_smp_processor_id+0x17/0x20 [ 2042.647886][T12082] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2042.653791][T12082] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2042.659257][T12082] do_syscall_64+0x3d/0xb0 [ 2042.663509][T12082] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2042.669238][T12082] RIP: 0033:0x7f3c5e561da9 [ 2042.673495][T12082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2042.692932][T12082] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2042.701266][T12082] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2042.709076][T12082] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2042.716888][T12082] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2042.724698][T12082] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2042.732510][T12082] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 05:20:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f00000002c0)=[{}, {}], 0xfffffffffffffdcd, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000740)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f00000005c0)=""/217, 0xd9, 0x0, &(0x7f00000006c0)=""/135, 0x87}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000005000000af9c000002000000183000000200001000a3781ce7cc9de5a8cc756c0374229c0f618f"], &(0x7f00000000c0)='GPL\x00', 0x401, 0x5e, &(0x7f0000000100)=""/94, 0x41000, 0x20, '\x00', r1, 0x28, r2, 0x8, &(0x7f0000000540)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x7}, 0x10, r3, r0, 0x4, 0x0, &(0x7f0000000800)=[{0x3, 0x4, 0xd, 0xb}, {0x0, 0x5, 0xd, 0xe}, {0x2, 0x2, 0xa, 0xa}, {0x2, 0x1, 0x3, 0x2}], 0x10, 0xffffffff}, 0x90) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:10 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x1, 0x4, 0x81, 0x0, 0x9, 0xc021, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7ff, 0x4}, 0x4, 0x401, 0x6, 0x1, 0x3, 0x3, 0x400, 0x0, 0x5b61, 0x0, 0x9f7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x7, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2042.740327][T12082] 05:20:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f00000002c0)=[{}, {}], 0xfffffffffffffdcd, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000740)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f00000005c0)=""/217, 0xd9, 0x0, &(0x7f00000006c0)=""/135, 0x87}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000005000000af9c000002000000183000000200001000a3781ce7cc9de5a8cc756c0374229c0f618f"], &(0x7f00000000c0)='GPL\x00', 0x401, 0x5e, &(0x7f0000000100)=""/94, 0x41000, 0x20, '\x00', r1, 0x28, r2, 0x8, &(0x7f0000000540)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x7}, 0x10, r3, r0, 0x4, 0x0, &(0x7f0000000800)=[{0x3, 0x4, 0xd, 0xb}, {0x0, 0x5, 0xd, 0xe}, {0x2, 0x2, 0xa, 0xa}, {0x2, 0x1, 0x3, 0x2}], 0x10, 0xffffffff}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f00000002c0)=[{}, {}], 0xfffffffffffffdcd, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000740)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f00000005c0)=""/217, 0xd9, 0x0, &(0x7f00000006c0)=""/135, 0x87}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000005000000af9c000002000000183000000200001000a3781ce7cc9de5a8cc756c0374229c0f618f"], &(0x7f00000000c0)='GPL\x00', 0x401, 0x5e, &(0x7f0000000100)=""/94, 0x41000, 0x20, '\x00', r1, 0x28, r2, 0x8, &(0x7f0000000540)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x7}, 0x10, r3, r0, 0x4, 0x0, &(0x7f0000000800)=[{0x3, 0x4, 0xd, 0xb}, {0x0, 0x5, 0xd, 0xe}, {0x2, 0x2, 0xa, 0xa}, {0x2, 0x1, 0x3, 0x2}], 0x10, 0xffffffff}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) 05:20:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x8000, 0xb5e5, 0x0, 0x2a0, r2, 0x7f, '\x00', r3, r0, 0x4, 0x1, 0x5}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f00000003c0)=""/193, 0x39, 0xc1, 0x0, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa613}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x3, 0x3, 0x3, 0x6, 0x8, 0x30, 0x8}, @ldst={0x1, 0x1, 0x3, 0x1, 0x7, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x93, &(0x7f0000000140)=""/147, 0x41000, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000300)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x10, 0x1ff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r2, r1], 0x0, 0x10, 0x101}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 10) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x8000, 0xb5e5, 0x0, 0x2a0, r2, 0x7f, '\x00', r3, r0, 0x4, 0x1, 0x5}, 0x48) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f00000003c0)=""/193, 0x39, 0xc1, 0x0, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa613}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x3, 0x3, 0x3, 0x6, 0x8, 0x30, 0x8}, @ldst={0x1, 0x1, 0x3, 0x1, 0x7, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x93, &(0x7f0000000140)=""/147, 0x41000, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000300)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x10, 0x1ff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r2, r1], 0x0, 0x10, 0x101}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2042.836018][T12211] FAULT_INJECTION: forcing a failure. [ 2042.836018][T12211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2042.859920][T12211] CPU: 0 PID: 12211 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2042.870084][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2042.879975][T12211] Call Trace: [ 2042.883102][T12211] 05:20:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2042.885878][T12211] dump_stack_lvl+0x151/0x1b7 [ 2042.890393][T12211] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2042.895861][T12211] ? __stack_depot_save+0x34/0x470 [ 2042.900809][T12211] dump_stack+0x15/0x17 [ 2042.904797][T12211] should_fail+0x3c6/0x510 [ 2042.909050][T12211] should_fail_alloc_page+0x5a/0x80 [ 2042.914081][T12211] prepare_alloc_pages+0x15c/0x700 [ 2042.919027][T12211] ? __alloc_pages+0x8f0/0x8f0 [ 2042.923630][T12211] ? __alloc_pages_bulk+0xe40/0xe40 [ 2042.928663][T12211] __alloc_pages+0x18c/0x8f0 [ 2042.933088][T12211] ? prep_new_page+0x110/0x110 [ 2042.937690][T12211] ? __kasan_kmalloc+0x9/0x10 [ 2042.942202][T12211] ? __kmalloc+0x13a/0x270 [ 2042.946470][T12211] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2042.951664][T12211] __vmalloc_node_range+0x482/0x8d0 [ 2042.956701][T12211] dup_task_struct+0x416/0xc60 [ 2042.961296][T12211] ? copy_process+0x5c4/0x3290 [ 2042.965895][T12211] ? __kasan_check_write+0x14/0x20 [ 2042.970844][T12211] copy_process+0x5c4/0x3290 [ 2042.975275][T12211] ? __kasan_check_write+0x14/0x20 [ 2042.980217][T12211] ? proc_fail_nth_write+0x20b/0x290 [ 2042.985336][T12211] ? selinux_file_permission+0x2c4/0x570 [ 2042.990805][T12211] ? fsnotify_perm+0x6a/0x5d0 [ 2042.995324][T12211] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2043.000273][T12211] ? vfs_write+0x9ec/0x1110 [ 2043.004606][T12211] kernel_clone+0x21e/0x9e0 [ 2043.008945][T12211] ? file_end_write+0x1c0/0x1c0 [ 2043.013634][T12211] ? create_io_thread+0x1e0/0x1e0 [ 2043.018495][T12211] ? mutex_unlock+0xb2/0x260 [ 2043.022920][T12211] ? __mutex_lock_slowpath+0x10/0x10 [ 2043.028043][T12211] __x64_sys_clone+0x23f/0x290 [ 2043.032641][T12211] ? __do_sys_vfork+0x130/0x130 [ 2043.037326][T12211] ? ksys_write+0x260/0x2c0 [ 2043.041667][T12211] ? debug_smp_processor_id+0x17/0x20 [ 2043.046873][T12211] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2043.052777][T12211] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2043.058244][T12211] do_syscall_64+0x3d/0xb0 [ 2043.062496][T12211] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2043.068225][T12211] RIP: 0033:0x7f3c5e561da9 [ 2043.072481][T12211] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2043.091919][T12211] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2043.100165][T12211] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2043.107978][T12211] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2043.115788][T12211] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2043.123599][T12211] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x8000, 0xb5e5, 0x0, 0x2a0, r2, 0x7f, '\x00', r3, r0, 0x4, 0x1, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x8000, 0xb5e5, 0x0, 0x2a0, r2, 0x7f, '\x00', r3, r0, 0x4, 0x1, 0x5}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f00000003c0)=""/193, 0x39, 0xc1, 0x0, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa613}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x3, 0x3, 0x3, 0x6, 0x8, 0x30, 0x8}, @ldst={0x1, 0x1, 0x3, 0x1, 0x7, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x93, &(0x7f0000000140)=""/147, 0x41000, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000300)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x10, 0x1ff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r2, r1], 0x0, 0x10, 0x101}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) write$cgroup_int(r0, &(0x7f0000000000)=0x20, 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 11) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2043.131409][T12211] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2043.139233][T12211] 05:20:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xb3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2e246516, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x45, &(0x7f0000000280)=""/69, 0x41100, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x5, 0x5, 0x80, 0x7}, {0x3, 0x3, 0x9, 0x2}, {0x0, 0x3, 0x2}, {0x0, 0x3, 0x9, 0xa}], 0x10, 0x8}, 0x90) 05:20:10 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = getpid() r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x1f, 0x1f, 0x2, 0x0, 0x2, 0x47001, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000180), 0xf}, 0x4820, 0x9, 0x8001, 0x3, 0x4, 0x8, 0xf801, 0x0, 0x7fff, 0x0, 0x8001}, r1, 0xb, r0, 0x1) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x6, 0x0, 0x0, 0x0, 0x7, 0x11408, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x1}, 0xa, 0xffffffffffffffff, 0x3f47, 0x3, 0x1ff, 0x6, 0x1f, 0x0, 0x4, 0x0, 0x8}, r4, 0x10, r5, 0x9) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) write$cgroup_type(r8, &(0x7f0000000200), 0x9) [ 2043.202806][T12231] FAULT_INJECTION: forcing a failure. [ 2043.202806][T12231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2043.253628][T12231] CPU: 1 PID: 12231 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2043.263790][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2043.273685][T12231] Call Trace: [ 2043.276810][T12231] [ 2043.279589][T12231] dump_stack_lvl+0x151/0x1b7 [ 2043.284102][T12231] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2043.289567][T12231] ? __stack_depot_save+0x34/0x470 [ 2043.294516][T12231] dump_stack+0x15/0x17 [ 2043.298508][T12231] should_fail+0x3c6/0x510 [ 2043.302759][T12231] should_fail_alloc_page+0x5a/0x80 [ 2043.307793][T12231] prepare_alloc_pages+0x15c/0x700 [ 2043.312745][T12231] ? __alloc_pages+0x8f0/0x8f0 [ 2043.317343][T12231] ? __alloc_pages_bulk+0xe40/0xe40 [ 2043.322376][T12231] __alloc_pages+0x18c/0x8f0 [ 2043.326802][T12231] ? prep_new_page+0x110/0x110 [ 2043.331403][T12231] ? __kasan_kmalloc+0x9/0x10 [ 2043.335913][T12231] ? __kmalloc+0x13a/0x270 [ 2043.340166][T12231] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2043.345376][T12231] __vmalloc_node_range+0x482/0x8d0 [ 2043.350413][T12231] dup_task_struct+0x416/0xc60 [ 2043.355008][T12231] ? copy_process+0x5c4/0x3290 [ 2043.359609][T12231] ? __kasan_check_write+0x14/0x20 [ 2043.364560][T12231] copy_process+0x5c4/0x3290 [ 2043.368984][T12231] ? __kasan_check_write+0x14/0x20 [ 2043.373929][T12231] ? proc_fail_nth_write+0x20b/0x290 [ 2043.379049][T12231] ? selinux_file_permission+0x2c4/0x570 [ 2043.384521][T12231] ? fsnotify_perm+0x6a/0x5d0 [ 2043.389035][T12231] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2043.393979][T12231] ? vfs_write+0x9ec/0x1110 [ 2043.398321][T12231] kernel_clone+0x21e/0x9e0 [ 2043.402660][T12231] ? file_end_write+0x1c0/0x1c0 [ 2043.407346][T12231] ? create_io_thread+0x1e0/0x1e0 [ 2043.412205][T12231] ? mutex_unlock+0xb2/0x260 [ 2043.416634][T12231] ? __mutex_lock_slowpath+0x10/0x10 [ 2043.421841][T12231] __x64_sys_clone+0x23f/0x290 [ 2043.426441][T12231] ? __do_sys_vfork+0x130/0x130 [ 2043.431132][T12231] ? ksys_write+0x260/0x2c0 [ 2043.435467][T12231] ? debug_smp_processor_id+0x17/0x20 [ 2043.440676][T12231] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2043.446577][T12231] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2043.452064][T12231] do_syscall_64+0x3d/0xb0 [ 2043.456296][T12231] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2043.462023][T12231] RIP: 0033:0x7f3c5e561da9 [ 2043.466279][T12231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2043.485727][T12231] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2043.493970][T12231] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xb3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2e246516, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x45, &(0x7f0000000280)=""/69, 0x41100, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x5, 0x5, 0x80, 0x7}, {0x3, 0x3, 0x9, 0x2}, {0x0, 0x3, 0x2}, {0x0, 0x3, 0x9, 0xa}], 0x10, 0x8}, 0x90) 05:20:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 12) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2043.501785][T12231] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2043.509589][T12231] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2043.517401][T12231] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2043.525212][T12231] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2043.533033][T12231] 05:20:11 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xb3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2e246516, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x45, &(0x7f0000000280)=""/69, 0x41100, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x5, 0x5, 0x80, 0x7}, {0x3, 0x3, 0x9, 0x2}, {0x0, 0x3, 0x2}, {0x0, 0x3, 0x9, 0xa}], 0x10, 0x8}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xb3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2e246516, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x45, &(0x7f0000000280)=""/69, 0x41100, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x5, 0x5, 0x80, 0x7}, {0x3, 0x3, 0x9, 0x2}, {0x0, 0x3, 0x2}, {0x0, 0x3, 0x9, 0xa}], 0x10, 0x8}, 0x90) 05:20:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) write$cgroup_int(r0, &(0x7f0000000000)=0x20, 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2043.585392][T12247] FAULT_INJECTION: forcing a failure. [ 2043.585392][T12247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2043.638404][T12247] CPU: 0 PID: 12247 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2043.648566][T12247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2043.658463][T12247] Call Trace: [ 2043.661586][T12247] [ 2043.664363][T12247] dump_stack_lvl+0x151/0x1b7 [ 2043.668892][T12247] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2043.674346][T12247] ? __stack_depot_save+0x34/0x470 [ 2043.679301][T12247] dump_stack+0x15/0x17 [ 2043.683298][T12247] should_fail+0x3c6/0x510 05:20:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'net_prio'}]}, 0x1f) [ 2043.687541][T12247] should_fail_alloc_page+0x5a/0x80 [ 2043.692573][T12247] prepare_alloc_pages+0x15c/0x700 [ 2043.697519][T12247] ? __alloc_pages+0x8f0/0x8f0 [ 2043.702118][T12247] ? __alloc_pages_bulk+0xe40/0xe40 [ 2043.707154][T12247] __alloc_pages+0x18c/0x8f0 [ 2043.711581][T12247] ? prep_new_page+0x110/0x110 [ 2043.716180][T12247] ? __kasan_kmalloc+0x9/0x10 [ 2043.720704][T12247] ? __kmalloc+0x13a/0x270 [ 2043.724947][T12247] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2043.730160][T12247] __vmalloc_node_range+0x482/0x8d0 [ 2043.735191][T12247] dup_task_struct+0x416/0xc60 [ 2043.739791][T12247] ? copy_process+0x5c4/0x3290 [ 2043.744386][T12247] ? __kasan_check_write+0x14/0x20 [ 2043.749339][T12247] copy_process+0x5c4/0x3290 [ 2043.753764][T12247] ? __kasan_check_write+0x14/0x20 [ 2043.758710][T12247] ? proc_fail_nth_write+0x20b/0x290 [ 2043.763830][T12247] ? selinux_file_permission+0x2c4/0x570 [ 2043.769302][T12247] ? fsnotify_perm+0x6a/0x5d0 [ 2043.773810][T12247] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2043.778763][T12247] ? vfs_write+0x9ec/0x1110 [ 2043.783109][T12247] kernel_clone+0x21e/0x9e0 [ 2043.787435][T12247] ? file_end_write+0x1c0/0x1c0 [ 2043.792122][T12247] ? create_io_thread+0x1e0/0x1e0 [ 2043.796984][T12247] ? mutex_unlock+0xb2/0x260 [ 2043.801410][T12247] ? __mutex_lock_slowpath+0x10/0x10 [ 2043.806527][T12247] __x64_sys_clone+0x23f/0x290 [ 2043.811134][T12247] ? __do_sys_vfork+0x130/0x130 [ 2043.815811][T12247] ? ksys_write+0x260/0x2c0 [ 2043.820154][T12247] ? debug_smp_processor_id+0x17/0x20 [ 2043.825360][T12247] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2043.831264][T12247] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2043.836731][T12247] do_syscall_64+0x3d/0xb0 [ 2043.840984][T12247] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2043.846712][T12247] RIP: 0033:0x7f3c5e561da9 [ 2043.850965][T12247] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2043.870405][T12247] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2043.878650][T12247] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2043.886463][T12247] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2043.894273][T12247] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2043.902084][T12247] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2043.909896][T12247] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2043.917712][T12247] 05:20:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_int(r0, &(0x7f0000000000)=0x20, 0x12) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 13) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'net_prio'}]}, 0x1f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'net_prio'}]}, 0x1f) (async) [ 2044.018541][T12271] FAULT_INJECTION: forcing a failure. [ 2044.018541][T12271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2044.043316][T12271] CPU: 1 PID: 12271 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2044.053471][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2044.063366][T12271] Call Trace: [ 2044.066488][T12271] [ 2044.069267][T12271] dump_stack_lvl+0x151/0x1b7 [ 2044.073779][T12271] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2044.079249][T12271] ? __stack_depot_save+0x34/0x470 [ 2044.084196][T12271] dump_stack+0x15/0x17 [ 2044.088191][T12271] should_fail+0x3c6/0x510 [ 2044.092441][T12271] should_fail_alloc_page+0x5a/0x80 [ 2044.097474][T12271] prepare_alloc_pages+0x15c/0x700 [ 2044.102421][T12271] ? __alloc_pages+0x8f0/0x8f0 [ 2044.107023][T12271] ? __alloc_pages_bulk+0xe40/0xe40 [ 2044.112058][T12271] __alloc_pages+0x18c/0x8f0 [ 2044.116484][T12271] ? prep_new_page+0x110/0x110 [ 2044.121099][T12271] ? __kasan_kmalloc+0x9/0x10 [ 2044.125594][T12271] ? __kmalloc+0x13a/0x270 [ 2044.129846][T12271] ? __vmalloc_node_range+0x2d6/0x8d0 [ 2044.135058][T12271] __vmalloc_node_range+0x482/0x8d0 [ 2044.140093][T12271] dup_task_struct+0x416/0xc60 [ 2044.144688][T12271] ? copy_process+0x5c4/0x3290 [ 2044.149291][T12271] ? __kasan_check_write+0x14/0x20 [ 2044.154240][T12271] copy_process+0x5c4/0x3290 [ 2044.158664][T12271] ? __kasan_check_write+0x14/0x20 [ 2044.163609][T12271] ? proc_fail_nth_write+0x20b/0x290 [ 2044.168731][T12271] ? selinux_file_permission+0x2c4/0x570 [ 2044.174200][T12271] ? fsnotify_perm+0x6a/0x5d0 [ 2044.178712][T12271] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2044.183662][T12271] ? vfs_write+0x9ec/0x1110 [ 2044.188002][T12271] kernel_clone+0x21e/0x9e0 [ 2044.192339][T12271] ? file_end_write+0x1c0/0x1c0 [ 2044.197027][T12271] ? create_io_thread+0x1e0/0x1e0 [ 2044.201885][T12271] ? mutex_unlock+0xb2/0x260 [ 2044.206315][T12271] ? __mutex_lock_slowpath+0x10/0x10 [ 2044.211437][T12271] __x64_sys_clone+0x23f/0x290 [ 2044.216210][T12271] ? __do_sys_vfork+0x130/0x130 [ 2044.221007][T12271] ? ksys_write+0x260/0x2c0 [ 2044.225328][T12271] ? debug_smp_processor_id+0x17/0x20 [ 2044.230527][T12271] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2044.236430][T12271] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2044.241898][T12271] do_syscall_64+0x3d/0xb0 [ 2044.246151][T12271] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2044.251880][T12271] RIP: 0033:0x7f3c5e561da9 [ 2044.256135][T12271] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2044.275575][T12271] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2044.283819][T12271] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2044.291630][T12271] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2044.299441][T12271] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2044.307252][T12271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:12 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r4 = getpid() r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x1f, 0x1f, 0x2, 0x0, 0x2, 0x47001, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000180), 0xf}, 0x4820, 0x9, 0x8001, 0x3, 0x4, 0x8, 0xf801, 0x0, 0x7fff, 0x0, 0x8001}, r1, 0xb, r0, 0x1) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x6, 0x0, 0x0, 0x0, 0x7, 0x11408, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x1}, 0xa, 0xffffffffffffffff, 0x3f47, 0x3, 0x1ff, 0x6, 0x1f, 0x0, 0x4, 0x0, 0x8}, r4, 0x10, r5, 0x9) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) write$cgroup_type(r8, &(0x7f0000000200), 0x9) 05:20:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'net_prio'}]}, 0x1f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'net_prio'}]}, 0x1f) (async) 05:20:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 14) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2044.315064][T12271] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2044.322879][T12271] 05:20:12 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r4 = getpid() (async) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x1f, 0x1f, 0x2, 0x0, 0x2, 0x47001, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000180), 0xf}, 0x4820, 0x9, 0x8001, 0x3, 0x4, 0x8, 0xf801, 0x0, 0x7fff, 0x0, 0x8001}, r1, 0xb, r0, 0x1) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3f, 0x6, 0x0, 0x0, 0x0, 0x7, 0x11408, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x1}, 0xa, 0xffffffffffffffff, 0x3f47, 0x3, 0x1ff, 0x6, 0x1f, 0x0, 0x4, 0x0, 0x8}, r4, 0x10, r5, 0x9) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) (async) write$cgroup_type(r8, &(0x7f0000000200), 0x9) [ 2044.373315][T12330] FAULT_INJECTION: forcing a failure. [ 2044.373315][T12330] name failslab, interval 1, probability 0, space 0, times 0 [ 2044.395111][T12330] CPU: 0 PID: 12330 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2044.405265][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2044.415164][T12330] Call Trace: [ 2044.418289][T12330] [ 2044.421065][T12330] dump_stack_lvl+0x151/0x1b7 [ 2044.425579][T12330] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2044.431043][T12330] ? vmap_pages_range_noflush+0x7d5/0x800 [ 2044.436604][T12330] dump_stack+0x15/0x17 [ 2044.440590][T12330] should_fail+0x3c6/0x510 [ 2044.444847][T12330] __should_failslab+0xa4/0xe0 [ 2044.449451][T12330] ? prepare_creds+0x2f/0x6a0 [ 2044.453959][T12330] should_failslab+0x9/0x20 [ 2044.458294][T12330] slab_pre_alloc_hook+0x37/0xd0 [ 2044.463068][T12330] ? prepare_creds+0x2f/0x6a0 [ 2044.467586][T12330] kmem_cache_alloc+0x44/0x200 [ 2044.472181][T12330] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2044.477474][T12330] prepare_creds+0x2f/0x6a0 [ 2044.481820][T12330] copy_creds+0xf0/0x630 [ 2044.485892][T12330] ? dup_task_struct+0x7e6/0xc60 [ 2044.490670][T12330] copy_process+0x7c3/0x3290 [ 2044.495098][T12330] ? __kasan_check_write+0x14/0x20 [ 2044.500040][T12330] ? proc_fail_nth_write+0x20b/0x290 [ 2044.505163][T12330] ? selinux_file_permission+0x2c4/0x570 [ 2044.510629][T12330] ? fsnotify_perm+0x6a/0x5d0 [ 2044.515143][T12330] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2044.520091][T12330] ? vfs_write+0x9ec/0x1110 [ 2044.524433][T12330] kernel_clone+0x21e/0x9e0 [ 2044.528770][T12330] ? file_end_write+0x1c0/0x1c0 [ 2044.533456][T12330] ? create_io_thread+0x1e0/0x1e0 [ 2044.538315][T12330] ? mutex_unlock+0xb2/0x260 [ 2044.542743][T12330] ? __mutex_lock_slowpath+0x10/0x10 [ 2044.547866][T12330] __x64_sys_clone+0x23f/0x290 [ 2044.552463][T12330] ? __do_sys_vfork+0x130/0x130 [ 2044.557151][T12330] ? ksys_write+0x260/0x2c0 [ 2044.561492][T12330] ? debug_smp_processor_id+0x17/0x20 [ 2044.566697][T12330] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2044.572603][T12330] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2044.578068][T12330] do_syscall_64+0x3d/0xb0 [ 2044.582322][T12330] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2044.588049][T12330] RIP: 0033:0x7f3c5e561da9 [ 2044.592305][T12330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2044.611745][T12330] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:12 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="b8658d23b0a45933000000060000000000000019c7169c09d7e25a6aa2f37823036ab7813d156c2a5782390447e94a2fc886add18bb0f8244197c0ff581d5b3016be12001853fd5c142c7848ff4c7320daf6581e37244d73deff6107fb1aedbf409b9c7ea6a60252deb375cc8d75722d7ab52dee00f874a3e096d5588b46bb188339ed6cfff364cbe054d478d50da937c1c553a9e8edcd3fd5cdd9aa593602cd494f7a1f8377c6ed56857927c63471d79019bb971351c977b4046d2898c575ce07cf0ac80b583da0872696d77667936abe8d93b4834935a6cc275fe8ce789381f30dca430c9f998ab416e452518fa2d254f6717acc0aeec0df86811d2a", @ANYRES32=r4, @ANYBLOB="0000000002000000b702cb2c14000000b7030000000000008500000083ff7f000000000000000000550901000000000095000074450000000000bf91000000000000b702000000000080850000088400000003000000000000236dfb041be5ecef97997c2a29d555d7031ee363b57447b550ebf3f04856785a022c647a4456ad5852272ec5b20d2f9dbb25ecac28d9ecfde2ce3199fe6793a15ecafc9d4385a666bb6fa3e1c1fc84cb1c8d9d364ccef00648523b62331315a2675ac899205dbebcf4496a57046d89d3156a11eb20aced4858e7a56e003ebc0ec87cdd89df326a26c0e3af4e4a8c8951f70b66e1ef2865b3da06671adfb1db6a717cd13fc792df6d5790a0c8e2ed5e5536f91022e98cdac3b93ebdb5d7a9702049b0e2172c4e5b618011c95d67db855b2326beef1ec40a5ae4b1ff3fafc00672aac060"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2044.619990][T12330] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2044.627799][T12330] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2044.635614][T12330] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2044.643424][T12330] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2044.651236][T12330] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2044.659051][T12330] 05:20:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async, rerun: 32) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000f59ebf860d0c02d711df84784e9c2c607b71bb38", @ANYRES32=r5, @ANYRES32=r5], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 15) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='opu '], 0x1a) 05:20:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_int(r1, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) (async) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000f59ebf860d0c02d711df84784e9c2c607b71bb38", @ANYRES32=r5, @ANYRES32=r5], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2044.793693][T12521] FAULT_INJECTION: forcing a failure. [ 2044.793693][T12521] name failslab, interval 1, probability 0, space 0, times 0 [ 2044.827378][T12521] CPU: 0 PID: 12521 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2044.837649][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2044.847544][T12521] Call Trace: [ 2044.850664][T12521] [ 2044.853443][T12521] dump_stack_lvl+0x151/0x1b7 [ 2044.857960][T12521] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2044.863431][T12521] ? __alloc_pages+0x27e/0x8f0 [ 2044.868026][T12521] dump_stack+0x15/0x17 [ 2044.872017][T12521] should_fail+0x3c6/0x510 [ 2044.876272][T12521] __should_failslab+0xa4/0xe0 [ 2044.880869][T12521] ? vm_area_dup+0x26/0x230 [ 2044.885218][T12521] should_failslab+0x9/0x20 [ 2044.889552][T12521] slab_pre_alloc_hook+0x37/0xd0 [ 2044.894325][T12521] ? vm_area_dup+0x26/0x230 [ 2044.898660][T12521] kmem_cache_alloc+0x44/0x200 [ 2044.903264][T12521] vm_area_dup+0x26/0x230 [ 2044.907428][T12521] copy_mm+0x9a1/0x13e0 [ 2044.911424][T12521] ? copy_signal+0x610/0x610 [ 2044.915846][T12521] ? __init_rwsem+0xd6/0x1c0 [ 2044.920273][T12521] ? copy_signal+0x4e3/0x610 [ 2044.924699][T12521] copy_process+0x1149/0x3290 [ 2044.929218][T12521] ? proc_fail_nth_write+0x20b/0x290 [ 2044.934336][T12521] ? fsnotify_perm+0x6a/0x5d0 [ 2044.938852][T12521] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2044.943797][T12521] ? vfs_write+0x9ec/0x1110 [ 2044.948183][T12521] kernel_clone+0x21e/0x9e0 [ 2044.952641][T12521] ? file_end_write+0x1c0/0x1c0 [ 2044.957409][T12521] ? create_io_thread+0x1e0/0x1e0 [ 2044.962268][T12521] ? mutex_unlock+0xb2/0x260 [ 2044.966699][T12521] ? __mutex_lock_slowpath+0x10/0x10 [ 2044.971816][T12521] __x64_sys_clone+0x23f/0x290 [ 2044.976417][T12521] ? __do_sys_vfork+0x130/0x130 [ 2044.981101][T12521] ? ksys_write+0x260/0x2c0 [ 2044.985445][T12521] ? debug_smp_processor_id+0x17/0x20 [ 2044.990649][T12521] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2044.996551][T12521] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2045.002019][T12521] do_syscall_64+0x3d/0xb0 [ 2045.006272][T12521] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2045.011999][T12521] RIP: 0033:0x7f3c5e561da9 [ 2045.016254][T12521] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2045.035696][T12521] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) 05:20:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000f59ebf860d0c02d711df84784e9c2c607b71bb38", @ANYRES32=r5, @ANYRES32=r5], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) openat$cgroup_int(r1, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000200), 0x12) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000002c0)}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000f59ebf860d0c02d711df84784e9c2c607b71bb38", @ANYRES32=r5, @ANYRES32=r5], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) 05:20:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='opu '], 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='opu '], 0x1a) (async) 05:20:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 16) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2045.043941][T12521] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2045.051752][T12521] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2045.059563][T12521] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2045.067374][T12521] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2045.075186][T12521] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2045.083010][T12521] 05:20:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='opu '], 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='opu '], 0x1a) (async) [ 2045.133025][T12644] FAULT_INJECTION: forcing a failure. [ 2045.133025][T12644] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.151785][T12644] CPU: 0 PID: 12644 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2045.161944][T12644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2045.171840][T12644] Call Trace: [ 2045.174961][T12644] [ 2045.177741][T12644] dump_stack_lvl+0x151/0x1b7 [ 2045.182254][T12644] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2045.187721][T12644] ? vmap_pages_range_noflush+0x7d5/0x800 [ 2045.193278][T12644] dump_stack+0x15/0x17 [ 2045.197265][T12644] should_fail+0x3c6/0x510 [ 2045.201523][T12644] __should_failslab+0xa4/0xe0 [ 2045.206122][T12644] ? prepare_creds+0x2f/0x6a0 [ 2045.210633][T12644] should_failslab+0x9/0x20 [ 2045.214976][T12644] slab_pre_alloc_hook+0x37/0xd0 [ 2045.219745][T12644] ? prepare_creds+0x2f/0x6a0 [ 2045.224261][T12644] kmem_cache_alloc+0x44/0x200 [ 2045.228866][T12644] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2045.234155][T12644] prepare_creds+0x2f/0x6a0 [ 2045.238498][T12644] copy_creds+0xf0/0x630 [ 2045.242574][T12644] ? dup_task_struct+0x7e6/0xc60 [ 2045.247348][T12644] copy_process+0x7c3/0x3290 [ 2045.251777][T12644] ? __kasan_check_write+0x14/0x20 [ 2045.256719][T12644] ? proc_fail_nth_write+0x20b/0x290 [ 2045.261841][T12644] ? selinux_file_permission+0x2c4/0x570 [ 2045.267314][T12644] ? fsnotify_perm+0x6a/0x5d0 [ 2045.271827][T12644] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2045.276774][T12644] ? vfs_write+0x9ec/0x1110 [ 2045.281116][T12644] kernel_clone+0x21e/0x9e0 [ 2045.285452][T12644] ? file_end_write+0x1c0/0x1c0 [ 2045.290139][T12644] ? create_io_thread+0x1e0/0x1e0 [ 2045.294994][T12644] ? mutex_unlock+0xb2/0x260 [ 2045.299424][T12644] ? __mutex_lock_slowpath+0x10/0x10 [ 2045.304547][T12644] __x64_sys_clone+0x23f/0x290 [ 2045.309145][T12644] ? __do_sys_vfork+0x130/0x130 [ 2045.313830][T12644] ? ksys_write+0x260/0x2c0 [ 2045.318175][T12644] ? debug_smp_processor_id+0x17/0x20 [ 2045.323379][T12644] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2045.329282][T12644] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2045.334749][T12644] do_syscall_64+0x3d/0xb0 [ 2045.339001][T12644] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2045.344730][T12644] RIP: 0033:0x7f3c5e561da9 [ 2045.348985][T12644] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2045.368426][T12644] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='cgroup.controllers\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r4 = openat$cgroup_subtree(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="00466f0000000000000006000000"], 0x1a) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffe1d) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 05:20:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='cgroup.controllers\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r4 = openat$cgroup_subtree(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="00466f0000000000000006000000"], 0x1a) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffe1d) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 05:20:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000000000004d00f4ff0400000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000ff0000000c000000b70000000000000095000000000000000162b3d0fcfaf2000000800770fad7b7d9a7a651dcf4ced268d056e92b88ecea704a2ae3a7c70017b1f3db3933ed19"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x995, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x4, 0x4, 0xa}], 0x10, 0x3ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='irq_handler_exit\x00', r3}, 0x10) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x1, 0xffffffffffffffff, 0x6) 05:20:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) r2 = gettid() perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xa4, 0x3, 0x6, 0x0, 0x2, 0x46104, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc0, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x410, 0x7fffffffffffffff, 0x40, 0x3, 0x76, 0x2, 0x5, 0x0, 0x3, 0x0, 0x1}, r2, 0x2, r1, 0xa) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000e0ff95"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 17) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000000000004d00f4ff0400000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000ff0000000c000000b70000000000000095000000000000000162b3d0fcfaf2000000800770fad7b7d9a7a651dcf4ced268d056e92b88ecea704a2ae3a7c70017b1f3db3933ed19"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x995, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x4, 0x4, 0xa}], 0x10, 0x3ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='irq_handler_exit\x00', r3}, 0x10) (async, rerun: 64) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) (async, rerun: 32) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x1, 0xffffffffffffffff, 0x6) (rerun: 32) [ 2045.376670][T12644] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2045.384480][T12644] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2045.392291][T12644] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2045.400104][T12644] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2045.407923][T12644] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2045.415733][T12644] 05:20:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='cgroup.controllers\x00') (async, rerun: 32) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r4 = openat$cgroup_subtree(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="00466f0000000000000006000000"], 0x1a) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffffffffe1d) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 05:20:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 64) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000000000004d00f4ff0400000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000ff0000000c000000b70000000000000095000000000000000162b3d0fcfaf2000000800770fad7b7d9a7a651dcf4ced268d056e92b88ecea704a2ae3a7c70017b1f3db3933ed19"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x995, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x4, 0x4, 0xa}], 0x10, 0x3ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='irq_handler_exit\x00', r3}, 0x10) (async, rerun: 64) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x1, 0xffffffffffffffff, 0x6) [ 2045.483694][T12818] FAULT_INJECTION: forcing a failure. [ 2045.483694][T12818] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.500114][T12818] CPU: 0 PID: 12818 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2045.510271][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2045.520166][T12818] Call Trace: [ 2045.523290][T12818] [ 2045.526068][T12818] dump_stack_lvl+0x151/0x1b7 05:20:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2045.530581][T12818] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2045.536051][T12818] ? __kasan_check_write+0x14/0x20 [ 2045.540997][T12818] dump_stack+0x15/0x17 [ 2045.544991][T12818] should_fail+0x3c6/0x510 [ 2045.549244][T12818] __should_failslab+0xa4/0xe0 [ 2045.553841][T12818] ? create_user_ns+0x55a/0x19d0 [ 2045.558614][T12818] should_failslab+0x9/0x20 [ 2045.562953][T12818] slab_pre_alloc_hook+0x37/0xd0 [ 2045.567735][T12818] ? create_user_ns+0x55a/0x19d0 [ 2045.572503][T12818] kmem_cache_alloc+0x44/0x200 [ 2045.577110][T12818] create_user_ns+0x55a/0x19d0 05:20:13 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2045.581703][T12818] ? utsns_owner+0x40/0x40 [ 2045.585957][T12818] ? security_prepare_creds+0x102/0x140 [ 2045.591339][T12818] ? prepare_creds+0x486/0x6a0 [ 2045.595938][T12818] copy_creds+0x20e/0x630 [ 2045.600104][T12818] ? dup_task_struct+0x7e6/0xc60 [ 2045.604877][T12818] copy_process+0x7c3/0x3290 [ 2045.609311][T12818] ? __kasan_check_write+0x14/0x20 [ 2045.614250][T12818] ? proc_fail_nth_write+0x20b/0x290 [ 2045.619370][T12818] ? selinux_file_permission+0x2c4/0x570 [ 2045.624841][T12818] ? fsnotify_perm+0x6a/0x5d0 [ 2045.629354][T12818] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2045.634389][T12818] ? vfs_write+0x9ec/0x1110 [ 2045.638728][T12818] kernel_clone+0x21e/0x9e0 [ 2045.643070][T12818] ? file_end_write+0x1c0/0x1c0 [ 2045.647755][T12818] ? create_io_thread+0x1e0/0x1e0 [ 2045.652612][T12818] ? mutex_unlock+0xb2/0x260 [ 2045.657039][T12818] ? __mutex_lock_slowpath+0x10/0x10 [ 2045.662165][T12818] __x64_sys_clone+0x23f/0x290 [ 2045.666849][T12818] ? __do_sys_vfork+0x130/0x130 [ 2045.671533][T12818] ? ksys_write+0x260/0x2c0 [ 2045.675879][T12818] ? debug_smp_processor_id+0x17/0x20 [ 2045.681084][T12818] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2045.686985][T12818] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2045.692456][T12818] do_syscall_64+0x3d/0xb0 [ 2045.696705][T12818] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2045.702431][T12818] RIP: 0033:0x7f3c5e561da9 [ 2045.706686][T12818] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2045.726132][T12818] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2045.734372][T12818] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2045.742183][T12818] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2045.749992][T12818] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2045.757815][T12818] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2045.765618][T12818] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2045.773435][T12818] 05:20:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 18) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) r2 = gettid() perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xa4, 0x3, 0x6, 0x0, 0x2, 0x46104, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc0, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x410, 0x7fffffffffffffff, 0x40, 0x3, 0x76, 0x2, 0x5, 0x0, 0x3, 0x0, 0x1}, r2, 0x2, r1, 0xa) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000e0ff95"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2045.868099][T13125] FAULT_INJECTION: forcing a failure. [ 2045.868099][T13125] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.888265][T13125] CPU: 0 PID: 13125 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2045.898418][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2045.908314][T13125] Call Trace: [ 2045.911438][T13125] [ 2045.914218][T13125] dump_stack_lvl+0x151/0x1b7 [ 2045.918729][T13125] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2045.924199][T13125] dump_stack+0x15/0x17 [ 2045.928192][T13125] should_fail+0x3c6/0x510 [ 2045.932444][T13125] __should_failslab+0xa4/0xe0 [ 2045.937053][T13125] ? anon_vma_fork+0xf7/0x4e0 [ 2045.941554][T13125] should_failslab+0x9/0x20 [ 2045.945892][T13125] slab_pre_alloc_hook+0x37/0xd0 [ 2045.950665][T13125] ? anon_vma_fork+0xf7/0x4e0 [ 2045.955177][T13125] kmem_cache_alloc+0x44/0x200 [ 2045.959780][T13125] anon_vma_fork+0xf7/0x4e0 [ 2045.964117][T13125] ? anon_vma_name+0x4c/0x70 [ 2045.968545][T13125] ? vm_area_dup+0x17a/0x230 [ 2045.972970][T13125] copy_mm+0xa3a/0x13e0 [ 2045.976967][T13125] ? copy_signal+0x610/0x610 [ 2045.981389][T13125] ? __init_rwsem+0xd6/0x1c0 [ 2045.985817][T13125] ? copy_signal+0x4e3/0x610 [ 2045.990245][T13125] copy_process+0x1149/0x3290 [ 2045.994756][T13125] ? proc_fail_nth_write+0x20b/0x290 [ 2045.999878][T13125] ? fsnotify_perm+0x6a/0x5d0 [ 2046.004389][T13125] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2046.009337][T13125] ? vfs_write+0x9ec/0x1110 [ 2046.013676][T13125] kernel_clone+0x21e/0x9e0 [ 2046.018017][T13125] ? file_end_write+0x1c0/0x1c0 [ 2046.022703][T13125] ? create_io_thread+0x1e0/0x1e0 [ 2046.027568][T13125] ? mutex_unlock+0xb2/0x260 [ 2046.031989][T13125] ? __mutex_lock_slowpath+0x10/0x10 [ 2046.037114][T13125] __x64_sys_clone+0x23f/0x290 [ 2046.041713][T13125] ? __do_sys_vfork+0x130/0x130 [ 2046.046398][T13125] ? ksys_write+0x260/0x2c0 [ 2046.050739][T13125] ? debug_smp_processor_id+0x17/0x20 [ 2046.055943][T13125] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2046.061848][T13125] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2046.067316][T13125] do_syscall_64+0x3d/0xb0 [ 2046.071572][T13125] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2046.077298][T13125] RIP: 0033:0x7f3c5e561da9 [ 2046.081552][T13125] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2046.100992][T13125] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2046.109237][T13125] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 19) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) r2 = gettid() perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xa4, 0x3, 0x6, 0x0, 0x2, 0x46104, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc0, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x410, 0x7fffffffffffffff, 0x40, 0x3, 0x76, 0x2, 0x5, 0x0, 0x3, 0x0, 0x1}, r2, 0x2, r1, 0xa) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000e0ff95"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x1000, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2046.117047][T13125] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2046.124857][T13125] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2046.132671][T13125] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2046.140482][T13125] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2046.148297][T13125] 05:20:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x1000, 0x12) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2046.223931][T13143] FAULT_INJECTION: forcing a failure. [ 2046.223931][T13143] name failslab, interval 1, probability 0, space 0, times 0 [ 2046.236422][T13143] CPU: 0 PID: 13143 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2046.246500][T13143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2046.256396][T13143] Call Trace: [ 2046.259519][T13143] [ 2046.262297][T13143] dump_stack_lvl+0x151/0x1b7 [ 2046.266811][T13143] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2046.272280][T13143] dump_stack+0x15/0x17 [ 2046.276269][T13143] should_fail+0x3c6/0x510 [ 2046.280523][T13143] __should_failslab+0xa4/0xe0 [ 2046.285122][T13143] ? anon_vma_fork+0x1df/0x4e0 [ 2046.289722][T13143] should_failslab+0x9/0x20 [ 2046.294062][T13143] slab_pre_alloc_hook+0x37/0xd0 [ 2046.298839][T13143] ? anon_vma_fork+0x1df/0x4e0 [ 2046.303434][T13143] kmem_cache_alloc+0x44/0x200 [ 2046.308039][T13143] anon_vma_fork+0x1df/0x4e0 [ 2046.312463][T13143] copy_mm+0xa3a/0x13e0 [ 2046.316459][T13143] ? copy_signal+0x610/0x610 [ 2046.320882][T13143] ? __init_rwsem+0xd6/0x1c0 [ 2046.325310][T13143] ? copy_signal+0x4e3/0x610 [ 2046.329737][T13143] copy_process+0x1149/0x3290 [ 2046.334250][T13143] ? proc_fail_nth_write+0x20b/0x290 [ 2046.339371][T13143] ? fsnotify_perm+0x6a/0x5d0 [ 2046.343884][T13143] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2046.348835][T13143] ? vfs_write+0x9ec/0x1110 [ 2046.353172][T13143] kernel_clone+0x21e/0x9e0 [ 2046.357507][T13143] ? file_end_write+0x1c0/0x1c0 [ 2046.362211][T13143] ? create_io_thread+0x1e0/0x1e0 [ 2046.367058][T13143] ? mutex_unlock+0xb2/0x260 [ 2046.371489][T13143] ? __mutex_lock_slowpath+0x10/0x10 [ 2046.376607][T13143] __x64_sys_clone+0x23f/0x290 [ 2046.381205][T13143] ? __do_sys_vfork+0x130/0x130 [ 2046.385888][T13143] ? ksys_write+0x260/0x2c0 [ 2046.390232][T13143] ? debug_smp_processor_id+0x17/0x20 [ 2046.395437][T13143] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2046.401339][T13143] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2046.406818][T13143] do_syscall_64+0x3d/0xb0 [ 2046.411062][T13143] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2046.416790][T13143] RIP: 0033:0x7f3c5e561da9 [ 2046.421045][T13143] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2046.440491][T13143] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2046.448784][T13143] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2046.456542][T13143] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2046.464352][T13143] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 20) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x1000, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000040)=0x1000, 0x12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) [ 2046.472161][T13143] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2046.479973][T13143] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2046.487794][T13143] [ 2046.534482][T13151] FAULT_INJECTION: forcing a failure. [ 2046.534482][T13151] name failslab, interval 1, probability 0, space 0, times 0 [ 2046.552580][T13151] CPU: 1 PID: 13151 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2046.562735][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2046.572631][T13151] Call Trace: [ 2046.575753][T13151] [ 2046.578536][T13151] dump_stack_lvl+0x151/0x1b7 [ 2046.583052][T13151] ? io_uring_drop_tctx_refs+0x190/0x190 05:20:14 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x2, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000300000001000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x2, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x6, 0xb, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r11}, 0xfffffffffffffccf) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x22, &(0x7f0000000200)=@raw=[@exit, @printk={@lu}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @cb_func={0x18, 0xb}, @alu={0x7, 0x0, 0xc, 0x0, 0x7, 0x18, 0x4}, @tail_call, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func], &(0x7f0000000340)='syzkaller\x00', 0x3, 0xe, &(0x7f0000000380)=""/14, 0x0, 0x20, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x4, 0x1, 0xb, 0xe}, {0x2, 0x4, 0x6, 0xa}, {0x4, 0x4, 0x5}, {0x1, 0x1, 0x1, 0xd}, {0x5, 0x3, 0x7, 0x2}, {0x0, 0x1, 0xe, 0x7}, {0x0, 0x4, 0x6, 0x1}, {0x3, 0x4, 0x4, 0x5}, {0x1, 0x1, 0x3, 0x4}, {0x5, 0x4, 0x10, 0xc}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x10, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x1, 0xe, 0x2, 0x6, 0x30, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @generic={0xfe, 0x2, 0x6, 0x110, 0xc7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @exit], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xb, 0xfff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r0], &(0x7f0000000780)=[{0x1, 0x4, 0x9, 0xd}, {0x5, 0x3, 0x8, 0x7}, {0x2, 0x3, 0xb, 0x5}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r10, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe30, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffe3f, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50}, [@jmp={0x5, 0x0, 0x4, 0xe, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x26, &(0x7f00000003c0)=""/38, 0x41100, 0x6, '\x00', r12, 0x17, r5, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1e225, r6, 0x0, &(0x7f0000000480)=[r7, r9, r8, r8, r9, 0xffffffffffffffff, r8], 0x0, 0x10, 0x5}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)=0x6001000000000000) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f0000000440)=0x3) 05:20:14 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2046.588522][T13151] ? _raw_spin_unlock+0x4d/0x70 [ 2046.593204][T13151] dump_stack+0x15/0x17 [ 2046.597193][T13151] should_fail+0x3c6/0x510 [ 2046.601449][T13151] __should_failslab+0xa4/0xe0 [ 2046.606050][T13151] should_failslab+0x9/0x20 [ 2046.610388][T13151] slab_pre_alloc_hook+0x37/0xd0 [ 2046.615163][T13151] kmem_cache_alloc_trace+0x48/0x210 [ 2046.620278][T13151] ? alloc_ucounts+0x15c/0x500 [ 2046.624881][T13151] alloc_ucounts+0x15c/0x500 [ 2046.629308][T13151] ? prepare_creds+0x486/0x6a0 [ 2046.633907][T13151] copy_creds+0x344/0x630 [ 2046.638079][T13151] copy_process+0x7c3/0x3290 [ 2046.642506][T13151] ? __kasan_check_write+0x14/0x20 [ 2046.647456][T13151] ? proc_fail_nth_write+0x20b/0x290 [ 2046.652570][T13151] ? selinux_file_permission+0x2c4/0x570 [ 2046.658038][T13151] ? fsnotify_perm+0x6a/0x5d0 [ 2046.662549][T13151] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2046.667497][T13151] ? vfs_write+0x9ec/0x1110 [ 2046.671839][T13151] kernel_clone+0x21e/0x9e0 [ 2046.676174][T13151] ? file_end_write+0x1c0/0x1c0 [ 2046.680862][T13151] ? create_io_thread+0x1e0/0x1e0 [ 2046.685727][T13151] ? mutex_unlock+0xb2/0x260 [ 2046.690239][T13151] ? __mutex_lock_slowpath+0x10/0x10 [ 2046.695358][T13151] __x64_sys_clone+0x23f/0x290 [ 2046.699956][T13151] ? __do_sys_vfork+0x130/0x130 [ 2046.704643][T13151] ? ksys_write+0x260/0x2c0 [ 2046.708985][T13151] ? debug_smp_processor_id+0x17/0x20 [ 2046.714196][T13151] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2046.720092][T13151] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2046.725565][T13151] do_syscall_64+0x3d/0xb0 [ 2046.729815][T13151] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2046.735542][T13151] RIP: 0033:0x7f3c5e561da9 [ 2046.739802][T13151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2046.759241][T13151] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2046.767482][T13151] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2046.775294][T13151] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) socketpair(0x9, 0x800, 0x1, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2b, 'blkio'}, {0x2b, 'blkio'}, {0x2b, 'cpu'}]}, 0x1c) 05:20:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 21) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2046.783110][T13151] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2046.790916][T13151] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2046.798725][T13151] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2046.806553][T13151] 05:20:14 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x2, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000300000001000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x2, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x6, 0xb, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x48) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f00000000c0), 0x0}, 0x20) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async, rerun: 64) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r11}, 0xfffffffffffffccf) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x22, &(0x7f0000000200)=@raw=[@exit, @printk={@lu}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @cb_func={0x18, 0xb}, @alu={0x7, 0x0, 0xc, 0x0, 0x7, 0x18, 0x4}, @tail_call, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func], &(0x7f0000000340)='syzkaller\x00', 0x3, 0xe, &(0x7f0000000380)=""/14, 0x0, 0x20, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x4, 0x1, 0xb, 0xe}, {0x2, 0x4, 0x6, 0xa}, {0x4, 0x4, 0x5}, {0x1, 0x1, 0x1, 0xd}, {0x5, 0x3, 0x7, 0x2}, {0x0, 0x1, 0xe, 0x7}, {0x0, 0x4, 0x6, 0x1}, {0x3, 0x4, 0x4, 0x5}, {0x1, 0x1, 0x3, 0x4}, {0x5, 0x4, 0x10, 0xc}], 0x10, 0x4}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x10, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x1, 0xe, 0x2, 0x6, 0x30, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @generic={0xfe, 0x2, 0x6, 0x110, 0xc7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @exit], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xb, 0xfff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r0], &(0x7f0000000780)=[{0x1, 0x4, 0x9, 0xd}, {0x5, 0x3, 0x8, 0x7}, {0x2, 0x3, 0xb, 0x5}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x3}, 0x90) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r10, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe30, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffe3f, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50}, [@jmp={0x5, 0x0, 0x4, 0xe, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x26, &(0x7f00000003c0)=""/38, 0x41100, 0x6, '\x00', r12, 0x17, r5, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1e225, r6, 0x0, &(0x7f0000000480)=[r7, r9, r8, r8, r9, 0xffffffffffffffff, r8], 0x0, 0x10, 0x5}, 0x90) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)=0x6001000000000000) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f0000000440)=0x3) [ 2046.869364][T13169] FAULT_INJECTION: forcing a failure. [ 2046.869364][T13169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2046.882523][T13169] CPU: 1 PID: 13169 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2046.892670][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2046.902564][T13169] Call Trace: [ 2046.905689][T13169] [ 2046.908467][T13169] dump_stack_lvl+0x151/0x1b7 [ 2046.912989][T13169] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2046.918456][T13169] dump_stack+0x15/0x17 [ 2046.922439][T13169] should_fail+0x3c6/0x510 [ 2046.926692][T13169] should_fail_alloc_page+0x5a/0x80 [ 2046.931727][T13169] prepare_alloc_pages+0x15c/0x700 [ 2046.936676][T13169] ? __alloc_pages_bulk+0xe40/0xe40 [ 2046.941709][T13169] __alloc_pages+0x18c/0x8f0 [ 2046.946137][T13169] ? prep_new_page+0x110/0x110 [ 2046.950741][T13169] ? __alloc_pages+0x27e/0x8f0 [ 2046.955369][T13169] ? __kasan_check_write+0x14/0x20 [ 2046.960382][T13169] ? _raw_spin_lock+0xa4/0x1b0 [ 2046.964981][T13169] __pmd_alloc+0xb1/0x550 [ 2046.969150][T13169] ? __pud_alloc+0x260/0x260 [ 2046.973576][T13169] ? __pud_alloc+0x213/0x260 [ 2046.978002][T13169] ? do_handle_mm_fault+0x2330/0x2330 [ 2046.983209][T13169] ? __stack_depot_save+0x34/0x470 [ 2046.988163][T13169] ? anon_vma_clone+0x9a/0x500 [ 2046.992758][T13169] copy_page_range+0x2b3d/0x2f90 [ 2046.997535][T13169] ? __kasan_slab_alloc+0xb1/0xe0 [ 2047.002396][T13169] ? slab_post_alloc_hook+0x53/0x2c0 [ 2047.007511][T13169] ? copy_mm+0xa3a/0x13e0 [ 2047.011675][T13169] ? copy_process+0x1149/0x3290 [ 2047.016362][T13169] ? kernel_clone+0x21e/0x9e0 [ 2047.020879][T13169] ? do_syscall_64+0x3d/0xb0 [ 2047.025309][T13169] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2047.031218][T13169] ? pfn_valid+0x1e0/0x1e0 [ 2047.035459][T13169] ? rwsem_write_trylock+0x15b/0x290 [ 2047.040581][T13169] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2047.046836][T13169] copy_mm+0xc7e/0x13e0 [ 2047.050830][T13169] ? copy_signal+0x610/0x610 [ 2047.055252][T13169] ? __init_rwsem+0xd6/0x1c0 [ 2047.059673][T13169] ? copy_signal+0x4e3/0x610 [ 2047.064101][T13169] copy_process+0x1149/0x3290 [ 2047.068617][T13169] ? proc_fail_nth_write+0x20b/0x290 [ 2047.073737][T13169] ? fsnotify_perm+0x6a/0x5d0 [ 2047.078248][T13169] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2047.083197][T13169] ? vfs_write+0x9ec/0x1110 [ 2047.087540][T13169] kernel_clone+0x21e/0x9e0 [ 2047.091876][T13169] ? file_end_write+0x1c0/0x1c0 [ 2047.096561][T13169] ? create_io_thread+0x1e0/0x1e0 [ 2047.101419][T13169] ? mutex_unlock+0xb2/0x260 [ 2047.105848][T13169] ? __mutex_lock_slowpath+0x10/0x10 [ 2047.110974][T13169] __x64_sys_clone+0x23f/0x290 [ 2047.115572][T13169] ? __do_sys_vfork+0x130/0x130 05:20:14 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x2, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000300000001000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x2, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x6, 0xb, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r11}, 0xfffffffffffffccf) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x22, &(0x7f0000000200)=@raw=[@exit, @printk={@lu}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @cb_func={0x18, 0xb}, @alu={0x7, 0x0, 0xc, 0x0, 0x7, 0x18, 0x4}, @tail_call, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func], &(0x7f0000000340)='syzkaller\x00', 0x3, 0xe, &(0x7f0000000380)=""/14, 0x0, 0x20, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x4, 0x1, 0xb, 0xe}, {0x2, 0x4, 0x6, 0xa}, {0x4, 0x4, 0x5}, {0x1, 0x1, 0x1, 0xd}, {0x5, 0x3, 0x7, 0x2}, {0x0, 0x1, 0xe, 0x7}, {0x0, 0x4, 0x6, 0x1}, {0x3, 0x4, 0x4, 0x5}, {0x1, 0x1, 0x3, 0x4}, {0x5, 0x4, 0x10, 0xc}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x10, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x1, 0xe, 0x2, 0x6, 0x30, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @generic={0xfe, 0x2, 0x6, 0x110, 0xc7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @exit], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xb, 0xfff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r0], &(0x7f0000000780)=[{0x1, 0x4, 0x9, 0xd}, {0x5, 0x3, 0x8, 0x7}, {0x2, 0x3, 0xb, 0x5}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x3}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x10, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x1, 0xe, 0x2, 0x6, 0x30, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @generic={0xfe, 0x2, 0x6, 0x110, 0xc7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @exit], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xb, 0xfff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r0], &(0x7f0000000780)=[{0x1, 0x4, 0x9, 0xd}, {0x5, 0x3, 0x8, 0x7}, {0x2, 0x3, 0xb, 0x5}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r10, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe30, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffe3f, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r10, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe30, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffe3f, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50}, [@jmp={0x5, 0x0, 0x4, 0xe, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x26, &(0x7f00000003c0)=""/38, 0x41100, 0x6, '\x00', r12, 0x17, r5, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1e225, r6, 0x0, &(0x7f0000000480)=[r7, r9, r8, r8, r9, 0xffffffffffffffff, r8], 0x0, 0x10, 0x5}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)=0x6001000000000000) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f0000000440)=0x3) [ 2047.120254][T13169] ? ksys_write+0x260/0x2c0 [ 2047.124601][T13169] ? debug_smp_processor_id+0x17/0x20 [ 2047.129806][T13169] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2047.135706][T13169] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2047.141180][T13169] do_syscall_64+0x3d/0xb0 [ 2047.145427][T13169] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2047.151154][T13169] RIP: 0033:0x7f3c5e561da9 [ 2047.155409][T13169] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2047.174851][T13169] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2047.183097][T13169] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2047.190918][T13169] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2047.198718][T13169] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2047.206531][T13169] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) socketpair(0x9, 0x800, 0x1, &(0x7f00000000c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2b, 'blkio'}, {0x2b, 'blkio'}, {0x2b, 'cpu'}]}, 0x1c) 05:20:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 22) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2047.214340][T13169] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2047.222157][T13169] [ 2047.268477][T13185] FAULT_INJECTION: forcing a failure. [ 2047.268477][T13185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2047.295552][T13185] CPU: 0 PID: 13185 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2047.305716][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2047.315609][T13185] Call Trace: [ 2047.318733][T13185] [ 2047.321508][T13185] dump_stack_lvl+0x151/0x1b7 [ 2047.326022][T13185] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2047.331489][T13185] ? kmem_cache_alloc+0x134/0x200 [ 2047.336353][T13185] dump_stack+0x15/0x17 [ 2047.340342][T13185] should_fail+0x3c6/0x510 [ 2047.344601][T13185] should_fail_alloc_page+0x5a/0x80 [ 2047.349631][T13185] prepare_alloc_pages+0x15c/0x700 [ 2047.354580][T13185] ? __alloc_pages_bulk+0xe40/0xe40 [ 2047.359614][T13185] __alloc_pages+0x18c/0x8f0 [ 2047.364037][T13185] ? prep_new_page+0x110/0x110 [ 2047.368637][T13185] ? __alloc_pages+0x27e/0x8f0 [ 2047.373240][T13185] ? __kasan_check_write+0x14/0x20 [ 2047.378185][T13185] ? _raw_spin_lock+0xa4/0x1b0 [ 2047.382788][T13185] __pmd_alloc+0xb1/0x550 [ 2047.386949][T13185] ? __pud_alloc+0x260/0x260 [ 2047.391375][T13185] ? __pud_alloc+0x213/0x260 [ 2047.395800][T13185] ? do_handle_mm_fault+0x2330/0x2330 [ 2047.401012][T13185] ? __stack_depot_save+0x34/0x470 [ 2047.405952][T13185] ? anon_vma_clone+0x9a/0x500 [ 2047.410562][T13185] copy_page_range+0x2b3d/0x2f90 [ 2047.415326][T13185] ? __kasan_slab_alloc+0xb1/0xe0 [ 2047.420189][T13185] ? slab_post_alloc_hook+0x53/0x2c0 [ 2047.425307][T13185] ? copy_mm+0xa3a/0x13e0 [ 2047.429474][T13185] ? copy_process+0x1149/0x3290 [ 2047.434159][T13185] ? kernel_clone+0x21e/0x9e0 [ 2047.438674][T13185] ? do_syscall_64+0x3d/0xb0 [ 2047.443101][T13185] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2047.449013][T13185] ? pfn_valid+0x1e0/0x1e0 [ 2047.453258][T13185] ? rwsem_write_trylock+0x15b/0x290 [ 2047.458377][T13185] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2047.464629][T13185] copy_mm+0xc7e/0x13e0 [ 2047.468619][T13185] ? copy_signal+0x610/0x610 [ 2047.473044][T13185] ? __init_rwsem+0xd6/0x1c0 [ 2047.477470][T13185] ? copy_signal+0x4e3/0x610 [ 2047.481897][T13185] copy_process+0x1149/0x3290 [ 2047.486413][T13185] ? proc_fail_nth_write+0x20b/0x290 [ 2047.491535][T13185] ? fsnotify_perm+0x6a/0x5d0 [ 2047.496056][T13185] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2047.500996][T13185] ? vfs_write+0x9ec/0x1110 [ 2047.505333][T13185] kernel_clone+0x21e/0x9e0 [ 2047.509668][T13185] ? file_end_write+0x1c0/0x1c0 [ 2047.514359][T13185] ? create_io_thread+0x1e0/0x1e0 [ 2047.519217][T13185] ? mutex_unlock+0xb2/0x260 [ 2047.523645][T13185] ? __mutex_lock_slowpath+0x10/0x10 [ 2047.528769][T13185] __x64_sys_clone+0x23f/0x290 [ 2047.533367][T13185] ? __do_sys_vfork+0x130/0x130 [ 2047.538051][T13185] ? ksys_write+0x260/0x2c0 [ 2047.542393][T13185] ? debug_smp_processor_id+0x17/0x20 [ 2047.547695][T13185] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2047.553597][T13185] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2047.559065][T13185] do_syscall_64+0x3d/0xb0 [ 2047.563316][T13185] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2047.569049][T13185] RIP: 0033:0x7f3c5e561da9 [ 2047.573303][T13185] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2047.592740][T13185] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2047.600990][T13185] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2047.608805][T13185] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) socketpair(0x9, 0x800, 0x1, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2b, 'blkio'}, {0x2b, 'blkio'}, {0x2b, 'cpu'}]}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) socketpair(0x9, 0x800, 0x1, &(0x7f00000000c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2b, 'blkio'}, {0x2b, 'blkio'}, {0x2b, 'cpu'}]}, 0x1c) (async) 05:20:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000008b70a0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:15 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 23) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2047.616703][T13185] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2047.624516][T13185] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2047.632326][T13185] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2047.640150][T13185] [ 2047.700710][T13227] FAULT_INJECTION: forcing a failure. [ 2047.700710][T13227] name failslab, interval 1, probability 0, space 0, times 0 [ 2047.717311][T13227] CPU: 0 PID: 13227 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2047.727471][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2047.737366][T13227] Call Trace: [ 2047.740487][T13227] [ 2047.743267][T13227] dump_stack_lvl+0x151/0x1b7 [ 2047.747779][T13227] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2047.753247][T13227] dump_stack+0x15/0x17 [ 2047.757238][T13227] should_fail+0x3c6/0x510 [ 2047.761490][T13227] __should_failslab+0xa4/0xe0 [ 2047.766090][T13227] ? vm_area_dup+0x26/0x230 [ 2047.770436][T13227] should_failslab+0x9/0x20 [ 2047.774772][T13227] slab_pre_alloc_hook+0x37/0xd0 [ 2047.779546][T13227] ? vm_area_dup+0x26/0x230 [ 2047.783881][T13227] kmem_cache_alloc+0x44/0x200 [ 2047.788486][T13227] vm_area_dup+0x26/0x230 [ 2047.792649][T13227] copy_mm+0x9a1/0x13e0 [ 2047.796645][T13227] ? copy_signal+0x610/0x610 [ 2047.801068][T13227] ? __init_rwsem+0xd6/0x1c0 [ 2047.805494][T13227] ? copy_signal+0x4e3/0x610 [ 2047.809924][T13227] copy_process+0x1149/0x3290 [ 2047.814436][T13227] ? __switch_to+0x62a/0x1190 [ 2047.818947][T13227] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2047.823894][T13227] ? asm_sysvec_irq_work+0x1b/0x20 [ 2047.828843][T13227] kernel_clone+0x21e/0x9e0 [ 2047.833202][T13227] ? create_io_thread+0x1e0/0x1e0 [ 2047.838043][T13227] ? __schedule+0xcd4/0x1590 [ 2047.842469][T13227] __x64_sys_clone+0x23f/0x290 [ 2047.847070][T13227] ? __do_sys_vfork+0x130/0x130 [ 2047.851754][T13227] ? switch_fpu_return+0x1ed/0x3d0 [ 2047.856711][T13227] ? __kasan_check_read+0x11/0x20 [ 2047.861564][T13227] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 2047.867032][T13227] do_syscall_64+0x3d/0xb0 [ 2047.871285][T13227] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2047.877013][T13227] RIP: 0033:0x7f3c5e561da9 [ 2047.881266][T13227] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:20:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10800, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffdffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x3}, 0x100, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800020000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x58, 0x7, 0x0, 0x40, 0x1021, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f2, 0x0, @perf_config_ext={0x6}, 0x1000, 0x0, 0x0, 0x1, 0x7f, 0x5, 0x8, 0x0, 0xa, 0x0, 0x7fc}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'io'}, {0x2d, 'io'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2b, 'net'}]}, 0x3b) 05:20:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 24) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2047.900708][T13227] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2047.908956][T13227] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2047.916764][T13227] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2047.924577][T13227] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2047.932387][T13227] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2047.940379][T13227] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2047.948195][T13227] 05:20:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'io'}, {0x2d, 'io'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2b, 'net'}]}, 0x3b) [ 2048.007043][T13318] FAULT_INJECTION: forcing a failure. [ 2048.007043][T13318] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.030243][T13318] CPU: 0 PID: 13318 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2048.040405][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2048.050299][T13318] Call Trace: [ 2048.053513][T13318] 05:20:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'io'}, {0x2d, 'io'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2b, 'net'}]}, 0x3b) 05:20:15 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00696f202d63fe80cac6626c6b696f202b637075202b637075200ddf0f7a8f9bb3019a4be27668ce84c4b8263882e25c58a6bf160e22bc"], 0x1a) 05:20:15 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1000}) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (rerun: 32) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00696f202d63fe80cac6626c6b696f202b637075202b637075200ddf0f7a8f9bb3019a4be27668ce84c4b8263882e25c58a6bf160e22bc"], 0x1a) [ 2048.056289][T13318] dump_stack_lvl+0x151/0x1b7 [ 2048.060803][T13318] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2048.066273][T13318] dump_stack+0x15/0x17 [ 2048.070261][T13318] should_fail+0x3c6/0x510 [ 2048.074519][T13318] __should_failslab+0xa4/0xe0 [ 2048.079115][T13318] ? copy_sighand+0x54/0x250 [ 2048.083540][T13318] should_failslab+0x9/0x20 [ 2048.087876][T13318] slab_pre_alloc_hook+0x37/0xd0 [ 2048.092655][T13318] ? copy_sighand+0x54/0x250 [ 2048.097076][T13318] kmem_cache_alloc+0x44/0x200 [ 2048.101675][T13318] copy_sighand+0x54/0x250 [ 2048.105933][T13318] copy_process+0x10d6/0x3290 [ 2048.110449][T13318] ? proc_fail_nth_write+0x20b/0x290 [ 2048.115567][T13318] ? fsnotify_perm+0x6a/0x5d0 [ 2048.120083][T13318] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2048.125029][T13318] ? vfs_write+0x9ec/0x1110 [ 2048.129368][T13318] kernel_clone+0x21e/0x9e0 [ 2048.133706][T13318] ? file_end_write+0x1c0/0x1c0 [ 2048.138396][T13318] ? create_io_thread+0x1e0/0x1e0 [ 2048.143253][T13318] ? mutex_unlock+0xb2/0x260 [ 2048.147682][T13318] ? __mutex_lock_slowpath+0x10/0x10 [ 2048.152805][T13318] __x64_sys_clone+0x23f/0x290 [ 2048.157407][T13318] ? __do_sys_vfork+0x130/0x130 [ 2048.162087][T13318] ? ksys_write+0x260/0x2c0 [ 2048.166441][T13318] ? debug_smp_processor_id+0x17/0x20 [ 2048.171634][T13318] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2048.177538][T13318] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2048.183006][T13318] do_syscall_64+0x3d/0xb0 [ 2048.187257][T13318] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2048.192984][T13318] RIP: 0033:0x7f3c5e561da9 [ 2048.197237][T13318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2048.216679][T13318] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2048.224922][T13318] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2048.232734][T13318] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2048.240548][T13318] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2048.248356][T13318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:15 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) (async, rerun: 64) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1000}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00696f202d63fe80cac6626c6b696f202b637075202b637075200ddf0f7a8f9bb3019a4be27668ce84c4b8263882e25c58a6bf160e22bc"], 0x1a) 05:20:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000008b70a0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2048.256167][T13318] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2048.263990][T13318] 05:20:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 25) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="087d6f00000000ad000000008000"/27], 0x1a) [ 2048.367865][T13343] FAULT_INJECTION: forcing a failure. [ 2048.367865][T13343] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.397955][T13343] CPU: 1 PID: 13343 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2048.408111][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 05:20:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10800, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffdffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x3}, 0x100, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800020000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x6) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2002) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x58, 0x7, 0x0, 0x40, 0x1021, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f2, 0x0, @perf_config_ext={0x6}, 0x1000, 0x0, 0x0, 0x1, 0x7f, 0x5, 0x8, 0x0, 0xa, 0x0, 0x7fc}) (async) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2048.418108][T13343] Call Trace: [ 2048.421232][T13343] [ 2048.424095][T13343] dump_stack_lvl+0x151/0x1b7 [ 2048.428607][T13343] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2048.434073][T13343] ? slab_post_alloc_hook+0x53/0x2c0 [ 2048.439281][T13343] ? kernel_clone+0x21e/0x9e0 [ 2048.443791][T13343] ? do_syscall_64+0x3d/0xb0 [ 2048.448220][T13343] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2048.454122][T13343] dump_stack+0x15/0x17 [ 2048.458112][T13343] should_fail+0x3c6/0x510 05:20:16 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2048.463843][T13343] __should_failslab+0xa4/0xe0 [ 2048.468440][T13343] ? copy_mm+0x192/0x13e0 [ 2048.472616][T13343] should_failslab+0x9/0x20 [ 2048.476995][T13343] slab_pre_alloc_hook+0x37/0xd0 [ 2048.481719][T13343] ? copy_mm+0x192/0x13e0 [ 2048.485884][T13343] kmem_cache_alloc+0x44/0x200 [ 2048.490486][T13343] copy_mm+0x192/0x13e0 [ 2048.494478][T13343] ? _raw_spin_lock+0xa4/0x1b0 [ 2048.499077][T13343] ? copy_signal+0x610/0x610 [ 2048.503511][T13343] ? __kasan_check_write+0x14/0x20 [ 2048.508457][T13343] ? __init_rwsem+0xd6/0x1c0 [ 2048.512878][T13343] ? copy_signal+0x4e3/0x610 [ 2048.517303][T13343] copy_process+0x1149/0x3290 [ 2048.521817][T13343] ? proc_fail_nth_write+0x20b/0x290 [ 2048.526938][T13343] ? fsnotify_perm+0x6a/0x5d0 [ 2048.531449][T13343] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2048.536397][T13343] ? vfs_write+0x9ec/0x1110 [ 2048.540741][T13343] kernel_clone+0x21e/0x9e0 [ 2048.545076][T13343] ? file_end_write+0x1c0/0x1c0 [ 2048.549766][T13343] ? create_io_thread+0x1e0/0x1e0 [ 2048.554623][T13343] ? mutex_unlock+0xb2/0x260 [ 2048.559052][T13343] ? __mutex_lock_slowpath+0x10/0x10 [ 2048.564173][T13343] __x64_sys_clone+0x23f/0x290 [ 2048.568774][T13343] ? __do_sys_vfork+0x130/0x130 [ 2048.573458][T13343] ? ksys_write+0x260/0x2c0 [ 2048.577801][T13343] ? debug_smp_processor_id+0x17/0x20 [ 2048.583005][T13343] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2048.588909][T13343] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2048.594376][T13343] do_syscall_64+0x3d/0xb0 [ 2048.598633][T13343] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2048.604360][T13343] RIP: 0033:0x7f3c5e561da9 [ 2048.608612][T13343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2048.628053][T13343] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2048.636295][T13343] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2048.644110][T13343] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2048.651920][T13343] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2048.659731][T13343] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040), 0x12) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="087d6f00000000ad000000008000"/27], 0x1a) 05:20:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 26) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10800, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10800, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffdffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x3}, 0x100, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800020000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x58, 0x7, 0x0, 0x40, 0x1021, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f2, 0x0, @perf_config_ext={0x6}, 0x1000, 0x0, 0x0, 0x1, 0x7f, 0x5, 0x8, 0x0, 0xa, 0x0, 0x7fc}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2048.667547][T13343] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2048.675358][T13343] 05:20:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="087d6f00000000ad000000008000"/27], 0x1a) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="087d6f00000000ad000000008000"/27], 0x1a) [ 2048.725741][T13457] FAULT_INJECTION: forcing a failure. [ 2048.725741][T13457] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.740571][T13457] CPU: 1 PID: 13457 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2048.750731][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2048.760628][T13457] Call Trace: [ 2048.763756][T13457] [ 2048.766532][T13457] dump_stack_lvl+0x151/0x1b7 [ 2048.771043][T13457] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2048.776514][T13457] dump_stack+0x15/0x17 [ 2048.780501][T13457] should_fail+0x3c6/0x510 [ 2048.784757][T13457] __should_failslab+0xa4/0xe0 [ 2048.789352][T13457] ? anon_vma_clone+0x9a/0x500 [ 2048.793954][T13457] should_failslab+0x9/0x20 [ 2048.798291][T13457] slab_pre_alloc_hook+0x37/0xd0 [ 2048.803066][T13457] ? anon_vma_clone+0x9a/0x500 [ 2048.807666][T13457] kmem_cache_alloc+0x44/0x200 [ 2048.812266][T13457] anon_vma_clone+0x9a/0x500 [ 2048.816694][T13457] anon_vma_fork+0x91/0x4e0 [ 2048.821032][T13457] ? anon_vma_name+0x4c/0x70 05:20:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x58, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0xfdef) openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2048.825459][T13457] ? vm_area_dup+0x17a/0x230 [ 2048.829889][T13457] copy_mm+0xa3a/0x13e0 [ 2048.833884][T13457] ? copy_signal+0x610/0x610 [ 2048.838305][T13457] ? __init_rwsem+0xd6/0x1c0 [ 2048.842732][T13457] ? copy_signal+0x4e3/0x610 [ 2048.847157][T13457] copy_process+0x1149/0x3290 [ 2048.851672][T13457] ? proc_fail_nth_write+0x20b/0x290 [ 2048.856794][T13457] ? fsnotify_perm+0x6a/0x5d0 [ 2048.861307][T13457] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2048.866249][T13457] ? vfs_write+0x9ec/0x1110 [ 2048.870593][T13457] kernel_clone+0x21e/0x9e0 [ 2048.874930][T13457] ? file_end_write+0x1c0/0x1c0 [ 2048.879617][T13457] ? create_io_thread+0x1e0/0x1e0 [ 2048.884475][T13457] ? mutex_unlock+0xb2/0x260 [ 2048.888905][T13457] ? __mutex_lock_slowpath+0x10/0x10 [ 2048.894026][T13457] __x64_sys_clone+0x23f/0x290 [ 2048.898626][T13457] ? __do_sys_vfork+0x130/0x130 [ 2048.903312][T13457] ? ksys_write+0x260/0x2c0 [ 2048.907653][T13457] ? debug_smp_processor_id+0x17/0x20 [ 2048.912858][T13457] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2048.918762][T13457] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2048.924231][T13457] do_syscall_64+0x3d/0xb0 [ 2048.928482][T13457] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2048.934210][T13457] RIP: 0033:0x7f3c5e561da9 [ 2048.938462][T13457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2048.957907][T13457] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2048.966153][T13457] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000008b70a0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2048.973961][T13457] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2048.981772][T13457] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2048.989584][T13457] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2048.997398][T13457] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2049.005208][T13457] 05:20:16 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x80, 0x0, 0x1, 0x40, 0x0, 0x8000, 0x5a109, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x47a, 0x6}, 0x2, 0x4, 0x12, 0x6, 0x7fff, 0x5, 0x7, 0x0, 0x5, 0x0, 0x1}, r1, 0x3, r2, 0xa) perf_event_open$cgroup(&(0x7f00000004c0)={0x6, 0x80, 0x4, 0x0, 0x81, 0x8, 0x0, 0x9d4a, 0x8401, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x10000, 0x1c000000}, 0x200, 0x0, 0x7f, 0x5, 0x2, 0x4, 0x200, 0x0, 0x6, 0x0, 0x1f}, r2, 0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r5 = syz_clone(0x200000, &(0x7f0000000300)="781fb9a7878ebf08e3abfd1bcab5f1beba0db61fdf1f92d3df28ed531f48dee0190dca727c2404b1f9bf1b4d3e7559c193d03880e82afbb50d555c8a502d0dbc62a39893619914263a95c7212cfdf481244daabae2b18e409a7a58237bac5593f13cdfa8e7adf5305bbbfe729e43eac8fa8ec7a99b8a", 0x76, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000003c0)="f0137d76a34943d572a87c02f489818922b7db54f0d237f2fcabd9af8d0bc32567b79ef87e0a978200eff4e2bc70893ee0b2f6ef3d4408d55a3239b73d9fa2430f968bf93a3731b66f6a5bb1f1d3c7e7b7be515e96920f9cc1e556154395") r6 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000200)=r6, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x9, 0x69, 0xb7, 0x4, 0x0, 0x80000000, 0x10480, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x1, 0x5, 0x2, 0x7fffffff, 0x6, 0x1, 0x0, 0x0, 0x0, 0x7}, r5, 0x6, r2, 0xa) perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x80, 0x6, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x80000001}, 0x40, 0x6, 0xe0000, 0x4, 0x3, 0xffff8001, 0x5f0, 0x0, 0x3, 0x0, 0x4}, r3, 0x1, r0, 0x5) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0xfe, 0x3f, 0x0, 0x3f, 0x0, 0x3, 0x4000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x100000, 0x6, 0x8, 0x3, 0x3, 0x3ff, 0x4, 0x0, 0x800, 0x0, 0x7ff}, r7, 0x8, r0, 0x4) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3, 0x5c, 0x62, 0x0, 0x0, 0xfff, 0x4008, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff61, 0x1, @perf_config_ext={0x6, 0x4}, 0x28, 0x490a, 0x7, 0x6, 0x6, 0x7fff, 0x8, 0x0, 0xdf, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r0, 0x4) 05:20:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 27) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:16 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x80, 0x0, 0x1, 0x40, 0x0, 0x8000, 0x5a109, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x47a, 0x6}, 0x2, 0x4, 0x12, 0x6, 0x7fff, 0x5, 0x7, 0x0, 0x5, 0x0, 0x1}, r1, 0x3, r2, 0xa) perf_event_open$cgroup(&(0x7f00000004c0)={0x6, 0x80, 0x4, 0x0, 0x81, 0x8, 0x0, 0x9d4a, 0x8401, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x10000, 0x1c000000}, 0x200, 0x0, 0x7f, 0x5, 0x2, 0x4, 0x200, 0x0, 0x6, 0x0, 0x1f}, r2, 0xffffffffffffffff, r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r5 = syz_clone(0x200000, &(0x7f0000000300)="781fb9a7878ebf08e3abfd1bcab5f1beba0db61fdf1f92d3df28ed531f48dee0190dca727c2404b1f9bf1b4d3e7559c193d03880e82afbb50d555c8a502d0dbc62a39893619914263a95c7212cfdf481244daabae2b18e409a7a58237bac5593f13cdfa8e7adf5305bbbfe729e43eac8fa8ec7a99b8a", 0x76, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000003c0)="f0137d76a34943d572a87c02f489818922b7db54f0d237f2fcabd9af8d0bc32567b79ef87e0a978200eff4e2bc70893ee0b2f6ef3d4408d55a3239b73d9fa2430f968bf93a3731b66f6a5bb1f1d3c7e7b7be515e96920f9cc1e556154395") (async) r6 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000200)=r6, 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r8 = openat$cgroup_procs(r7, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x9, 0x69, 0xb7, 0x4, 0x0, 0x80000000, 0x10480, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x1, 0x5, 0x2, 0x7fffffff, 0x6, 0x1, 0x0, 0x0, 0x0, 0x7}, r5, 0x6, r2, 0xa) (async) perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x80, 0x6, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x80000001}, 0x40, 0x6, 0xe0000, 0x4, 0x3, 0xffff8001, 0x5f0, 0x0, 0x3, 0x0, 0x4}, r3, 0x1, r0, 0x5) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0xfe, 0x3f, 0x0, 0x3f, 0x0, 0x3, 0x4000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x100000, 0x6, 0x8, 0x3, 0x3, 0x3ff, 0x4, 0x0, 0x800, 0x0, 0x7ff}, r7, 0x8, r0, 0x4) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3, 0x5c, 0x62, 0x0, 0x0, 0xfff, 0x4008, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff61, 0x1, @perf_config_ext={0x6, 0x4}, 0x28, 0x490a, 0x7, 0x6, 0x6, 0x7fff, 0x8, 0x0, 0xdf, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r0, 0x4) 05:20:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events.local\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair(0x0, 0xa, 0x5, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYRESDEC=r5, @ANYRES8, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r8], 0xb8}, 0x40002000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000b00)=[0x0], 0x0, 0x8f, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0xfffffd88, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8d0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xffe6) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x9, 0x5, 0x7891f9dd, 0x81, r5, 0x5, '\x00', r9, r5, 0x4, 0x4, 0x1, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x1a, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0x5, 0x4, 0x0, 0xfffffffffffffef4, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdab}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000c40)=""/167, 0x41000, 0x40, '\x00', r9, 0x1a, r5, 0x8, &(0x7f0000000940)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x0, 0x20, 0x11}, 0x10, r10, r11, 0x6, 0x0, &(0x7f0000000d80)=[{0x0, 0x4, 0xb, 0xb}, {0x2, 0x1, 0xf}, {0x3, 0x1, 0x6, 0x1}, {0x8, 0x5, 0x6, 0xb}, {0x1, 0x1, 0x2000001}, {0x3, 0x4, 0x5, 0x8}], 0x10, 0x3}, 0x90) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0xc8, &(0x7f0000000100)=""/200}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000380)='\x00', 0x0}, 0x48) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r4, 0xfff, '\x00', 0x0, r0, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x5b, &(0x7f00000003c0)=""/91, 0x41000, 0x12, '\x00', 0x0, 0xd3da1357e2ae225a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x4}, 0x10, r10, r12, 0x3, &(0x7f0000000240)=[r4, r13], &(0x7f00000004c0)=[{0x4, 0x4, 0xc, 0x1}, {0x1, 0x3, 0xd, 0xc}, {0x1, 0x3, 0x2, 0x1}], 0x10, 0x3}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x2d) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2049.174902][T13592] FAULT_INJECTION: forcing a failure. [ 2049.174902][T13592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2049.238063][T13592] CPU: 0 PID: 13592 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2049.248228][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2049.258123][T13592] Call Trace: [ 2049.261249][T13592] [ 2049.264025][T13592] dump_stack_lvl+0x151/0x1b7 [ 2049.268538][T13592] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2049.274003][T13592] ? stack_trace_save+0x113/0x1c0 [ 2049.278864][T13592] ? stack_trace_snprint+0xf0/0xf0 [ 2049.283813][T13592] ? _find_next_bit+0x1f3/0x200 [ 2049.288503][T13592] dump_stack+0x15/0x17 [ 2049.292493][T13592] should_fail+0x3c6/0x510 [ 2049.296745][T13592] should_fail_alloc_page+0x5a/0x80 [ 2049.301776][T13592] prepare_alloc_pages+0x15c/0x700 [ 2049.306736][T13592] ? __alloc_pages_bulk+0xe40/0xe40 [ 2049.311765][T13592] ? __kasan_check_write+0x14/0x20 [ 2049.316706][T13592] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 2049.322437][T13592] __alloc_pages+0x18c/0x8f0 [ 2049.326862][T13592] ? prep_new_page+0x110/0x110 [ 2049.331463][T13592] ? pcpu_alloc+0xda0/0x13e0 [ 2049.335892][T13592] __get_free_pages+0x10/0x30 [ 2049.340402][T13592] pgd_alloc+0x21/0x2c0 [ 2049.344393][T13592] mm_init+0x5c7/0x970 [ 2049.348303][T13592] copy_mm+0x1e3/0x13e0 [ 2049.352300][T13592] ? _raw_spin_lock+0xa4/0x1b0 [ 2049.356899][T13592] ? copy_signal+0x610/0x610 [ 2049.361321][T13592] ? __kasan_check_write+0x14/0x20 [ 2049.366263][T13592] ? __init_rwsem+0xd6/0x1c0 [ 2049.370694][T13592] ? copy_signal+0x4e3/0x610 [ 2049.375122][T13592] copy_process+0x1149/0x3290 [ 2049.379634][T13592] ? proc_fail_nth_write+0x20b/0x290 [ 2049.384770][T13592] ? fsnotify_perm+0x6a/0x5d0 [ 2049.389268][T13592] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2049.394210][T13592] ? vfs_write+0x9ec/0x1110 [ 2049.398551][T13592] kernel_clone+0x21e/0x9e0 [ 2049.402887][T13592] ? file_end_write+0x1c0/0x1c0 [ 2049.407576][T13592] ? create_io_thread+0x1e0/0x1e0 [ 2049.412434][T13592] ? mutex_unlock+0xb2/0x260 [ 2049.416862][T13592] ? __mutex_lock_slowpath+0x10/0x10 [ 2049.421985][T13592] __x64_sys_clone+0x23f/0x290 [ 2049.426583][T13592] ? __do_sys_vfork+0x130/0x130 [ 2049.431267][T13592] ? ksys_write+0x260/0x2c0 [ 2049.435621][T13592] ? debug_smp_processor_id+0x17/0x20 [ 2049.440817][T13592] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2049.446721][T13592] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2049.452190][T13592] do_syscall_64+0x3d/0xb0 [ 2049.456450][T13592] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2049.462169][T13592] RIP: 0033:0x7f3c5e561da9 [ 2049.466422][T13592] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:20:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x80, 0x0, 0x1, 0x40, 0x0, 0x8000, 0x5a109, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x47a, 0x6}, 0x2, 0x4, 0x12, 0x6, 0x7fff, 0x5, 0x7, 0x0, 0x5, 0x0, 0x1}, r1, 0x3, r2, 0xa) (async) perf_event_open$cgroup(&(0x7f00000004c0)={0x6, 0x80, 0x4, 0x0, 0x81, 0x8, 0x0, 0x9d4a, 0x8401, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x10000, 0x1c000000}, 0x200, 0x0, 0x7f, 0x5, 0x2, 0x4, 0x200, 0x0, 0x6, 0x0, 0x1f}, r2, 0xffffffffffffffff, r0, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async, rerun: 64) r5 = syz_clone(0x200000, &(0x7f0000000300)="781fb9a7878ebf08e3abfd1bcab5f1beba0db61fdf1f92d3df28ed531f48dee0190dca727c2404b1f9bf1b4d3e7559c193d03880e82afbb50d555c8a502d0dbc62a39893619914263a95c7212cfdf481244daabae2b18e409a7a58237bac5593f13cdfa8e7adf5305bbbfe729e43eac8fa8ec7a99b8a", 0x76, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000003c0)="f0137d76a34943d572a87c02f489818922b7db54f0d237f2fcabd9af8d0bc32567b79ef87e0a978200eff4e2bc70893ee0b2f6ef3d4408d55a3239b73d9fa2430f968bf93a3731b66f6a5bb1f1d3c7e7b7be515e96920f9cc1e556154395") (async, rerun: 64) r6 = getpid() (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000200)=r6, 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r8 = openat$cgroup_procs(r7, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) (async, rerun: 64) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x9, 0x69, 0xb7, 0x4, 0x0, 0x80000000, 0x10480, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x1, 0x5, 0x2, 0x7fffffff, 0x6, 0x1, 0x0, 0x0, 0x0, 0x7}, r5, 0x6, r2, 0xa) (async, rerun: 64) perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x80, 0x6, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x80000001}, 0x40, 0x6, 0xe0000, 0x4, 0x3, 0xffff8001, 0x5f0, 0x0, 0x3, 0x0, 0x4}, r3, 0x1, r0, 0x5) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0xfe, 0x3f, 0x0, 0x3f, 0x0, 0x3, 0x4000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x100000, 0x6, 0x8, 0x3, 0x3, 0x3ff, 0x4, 0x0, 0x800, 0x0, 0x7ff}, r7, 0x8, r0, 0x4) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3, 0x5c, 0x62, 0x0, 0x0, 0xfff, 0x4008, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff61, 0x1, @perf_config_ext={0x6, 0x4}, 0x28, 0x490a, 0x7, 0x6, 0x6, 0x7fff, 0x8, 0x0, 0xdf, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r0, 0x4) [ 2049.485863][T13592] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2049.494109][T13592] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2049.501924][T13592] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2049.509729][T13592] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2049.517543][T13592] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2049.525353][T13592] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2049.533172][T13592] 05:20:17 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x58, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0xfdef) (async) openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x3, 0xffffffffffffffff, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000020c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) r13 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000016c0)="60664770d8b2daae9711fe302be77aca", 0x10}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000785ee404be15293eb163d892cac2f71b2042901bd4f4588759a8edfd80fb93b0d88f22a0a64ace134592bba97994d0b53abea69109e7b5b9d79d248d62e935c855cfd555c23d1996100c1a5ed07240ab31846bebd7392646f98b924458e3035a59064a7e2b2a6c6e85cec7e9a1d59029c711612e128e89", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf5", 0x25}, {&(0x7f0000000700)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda0b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a", 0x8d}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f00000021c0)=ANY=[@ANYBLOB="2c00000000000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24001a0000000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000818f6efb30afd4a2fb8196e845534bfd198788e20ca7442e26a2c550a26da7e21c804f4c5223dec6924f3d4b3312c7e2827f44cb61259870eb08b32b4d618719d05c0923dddcbf24ca2c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB], 0xb0}, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x45, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0xf565, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x90) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x89a0, &(0x7f0000000080)) r19 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r20, &(0x7f0000000000), 0x400000) r21 = syz_clone(0x44004000, &(0x7f0000000640)="37acb25c63cc6d902cf48584f34f7e2ef7d9e88852b3f4564b28bc9425cdeef8464239e8b3cab5cc2bf01c7dab7537b9e3f724aac94c0c3aa453c053a96920ecd4891052026a35", 0x47, 0x0, &(0x7f0000000700), &(0x7f0000000740)="34d939ab84cadb3499e48db631de00e2d5a72bd936b249032ad00eecb86be6e28f5297cbe9399e5e04bb026a7d9f89aac5443809fd0bec028c9cf12472dbd8ebde23cc2a2259d09e4eeff4965dc4") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000007c0)=r21, 0x12) r22 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0xfffffffffffffe60, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r11, @ANYRES32=r15, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32=r18, @ANYBLOB="00000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r14, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r18, @ANYRES32=r8, @ANYRES32, @ANYBLOB="dc00000000000000000000000100000002000000115551704aaee593b4571f240a67142e567ed4f471d7e822a26a0e5f8ca4ee3766c15fad5604bd42f47ccb49dd8219e40aeece646b173273336476902a80bdb393567af3f6dee3805654411235fc4cfe897d02a28d2c5fda09d1b1253e64ba85b814c9e43843dd20c6acde8925292a9e07bf19bdb3f035673dfcbfbbc68f0bd98e65502b34cd65ea85b67c", @ANYRES32=r21, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r22, @ANYRES32, @ANYRES32=r12, @ANYBLOB="00e8e4b080c0c4e27fa02f785b000000"]}, 0x200400c4) r23 = openat$cgroup_type(r3, &(0x7f0000000180), 0x2, 0x0) gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="52f887651ed18c40c240624c4d4abb26aec166436e444c6b0dee77d6269a7720a854d9488433d33d", 0x28}, {&(0x7f00000003c0)="f88a7925ef85c0", 0x7}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000100000002000008", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r23, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r14, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r23, @ANYBLOB="1000000000000000010000000100000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r6], 0xe8, 0x44}, 0x40000) 05:20:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x3, 0xffffffffffffffff, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000020c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) r13 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000016c0)="60664770d8b2daae9711fe302be77aca", 0x10}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000785ee404be15293eb163d892cac2f71b2042901bd4f4588759a8edfd80fb93b0d88f22a0a64ace134592bba97994d0b53abea69109e7b5b9d79d248d62e935c855cfd555c23d1996100c1a5ed07240ab31846bebd7392646f98b924458e3035a59064a7e2b2a6c6e85cec7e9a1d59029c711612e128e89", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf5", 0x25}, {&(0x7f0000000700)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda0b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a", 0x8d}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f00000021c0)=ANY=[@ANYBLOB="2c00000000000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24001a0000000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000818f6efb30afd4a2fb8196e845534bfd198788e20ca7442e26a2c550a26da7e21c804f4c5223dec6924f3d4b3312c7e2827f44cb61259870eb08b32b4d618719d05c0923dddcbf24ca2c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB], 0xb0}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf5", 0x25}, {&(0x7f0000000700)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda0b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a", 0x8d}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="4322dc9192c6e5d335f2a76bd3fcfb6348a3bf478bd6b73893782252309bcbbac1383cd512022eedd12b2ed8d57bd2b04e13a418ced6639f9470c9f296648ac241422ee0cba9631309f8591b72a61460c3d51965d2f023f21a592500523f9f7ad8a2c3a86e3a7618eabb7ef0701b2b0c2e318c476e09471d124152674362a6f75742bea062bb3b1f918fcb57715f011f4ac0e2f1500cb181eca9e90845be5ef37e58671f8986e64a36760f1ecc3ec20c22d73d9bd2a9702476f6b6f6d0d102e57590207b8e58372b8d6405646c53a88a6f33e804b0f8edbd13ebdcae346a6d30347f93b753c26f0c4fddc8efe5878fc82b41754bde7a1be545cc", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f00000021c0)=ANY=[@ANYBLOB="2c00000000000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24001a0000000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000818f6efb30afd4a2fb8196e845534bfd198788e20ca7442e26a2c550a26da7e21c804f4c5223dec6924f3d4b3312c7e2827f44cb61259870eb08b32b4d618719d05c0923dddcbf24ca2c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB], 0xb0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x45, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0xf565, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x90) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x45, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0xf565, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x90) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x1) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x89a0, &(0x7f0000000080)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r19 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r20, &(0x7f0000000000), 0x400000) r21 = syz_clone(0x44004000, &(0x7f0000000640)="37acb25c63cc6d902cf48584f34f7e2ef7d9e88852b3f4564b28bc9425cdeef8464239e8b3cab5cc2bf01c7dab7537b9e3f724aac94c0c3aa453c053a96920ecd4891052026a35", 0x47, 0x0, &(0x7f0000000700), &(0x7f0000000740)="34d939ab84cadb3499e48db631de00e2d5a72bd936b249032ad00eecb86be6e28f5297cbe9399e5e04bb026a7d9f89aac5443809fd0bec028c9cf12472dbd8ebde23cc2a2259d09e4eeff4965dc4") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000007c0)=r21, 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000007c0)=r21, 0x12) r22 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0xfffffffffffffe60, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r11, @ANYRES32=r15, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32=r18, @ANYBLOB="00000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r14, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r18, @ANYRES32=r8, @ANYRES32, @ANYBLOB="dc00000000000000000000000100000002000000115551704aaee593b4571f240a67142e567ed4f471d7e822a26a0e5f8ca4ee3766c15fad5604bd42f47ccb49dd8219e40aeece646b173273336476902a80bdb393567af3f6dee3805654411235fc4cfe897d02a28d2c5fda09d1b1253e64ba85b814c9e43843dd20c6acde8925292a9e07bf19bdb3f035673dfcbfbbc68f0bd98e65502b34cd65ea85b67c", @ANYRES32=r21, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r22, @ANYRES32, @ANYRES32=r12, @ANYBLOB="00e8e4b080c0c4e27fa02f785b000000"]}, 0x200400c4) openat$cgroup_type(r3, &(0x7f0000000180), 0x2, 0x0) (async) r23 = openat$cgroup_type(r3, &(0x7f0000000180), 0x2, 0x0) gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="52f887651ed18c40c240624c4d4abb26aec166436e444c6b0dee77d6269a7720a854d9488433d33d", 0x28}, {&(0x7f00000003c0)="f88a7925ef85c0", 0x7}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000100000002000008", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r23, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r14, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r23, @ANYBLOB="1000000000000000010000000100000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r6], 0xe8, 0x44}, 0x40000) 05:20:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 28) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r4 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) (async) r6 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x3, 0xffffffffffffffff, 0x6) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000020c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) r13 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000016c0)="60664770d8b2daae9711fe302be77aca", 0x10}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000785ee404be15293eb163d892cac2f71b2042901bd4f4588759a8edfd80fb93b0d88f22a0a64ace134592bba97994d0b53abea69109e7b5b9d79d248d62e935c855cfd555c23d1996100c1a5ed07240ab31846bebd7392646f98b924458e3035a59064a7e2b2a6c6e85cec7e9a1d59029c711612e128e89", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf5", 0x25}, {&(0x7f0000000700)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda0b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a", 0x8d}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f00000021c0)=ANY=[@ANYBLOB="2c00000000000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24001a0000000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000818f6efb30afd4a2fb8196e845534bfd198788e20ca7442e26a2c550a26da7e21c804f4c5223dec6924f3d4b3312c7e2827f44cb61259870eb08b32b4d618719d05c0923dddcbf24ca2c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB], 0xb0}, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x45, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0xf565, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x90) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x89a0, &(0x7f0000000080)) (async) r19 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r20 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r20, &(0x7f0000000000), 0x400000) r21 = syz_clone(0x44004000, &(0x7f0000000640)="37acb25c63cc6d902cf48584f34f7e2ef7d9e88852b3f4564b28bc9425cdeef8464239e8b3cab5cc2bf01c7dab7537b9e3f724aac94c0c3aa453c053a96920ecd4891052026a35", 0x47, 0x0, &(0x7f0000000700), &(0x7f0000000740)="34d939ab84cadb3499e48db631de00e2d5a72bd936b249032ad00eecb86be6e28f5297cbe9399e5e04bb026a7d9f89aac5443809fd0bec028c9cf12472dbd8ebde23cc2a2259d09e4eeff4965dc4") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000007c0)=r21, 0x12) (async) r22 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0xfffffffffffffe60, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r11, @ANYRES32=r15, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32=r18, @ANYBLOB="00000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r14, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r18, @ANYRES32=r8, @ANYRES32, @ANYBLOB="dc00000000000000000000000100000002000000115551704aaee593b4571f240a67142e567ed4f471d7e822a26a0e5f8ca4ee3766c15fad5604bd42f47ccb49dd8219e40aeece646b173273336476902a80bdb393567af3f6dee3805654411235fc4cfe897d02a28d2c5fda09d1b1253e64ba85b814c9e43843dd20c6acde8925292a9e07bf19bdb3f035673dfcbfbbc68f0bd98e65502b34cd65ea85b67c", @ANYRES32=r21, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r22, @ANYRES32, @ANYRES32=r12, @ANYBLOB="00e8e4b080c0c4e27fa02f785b000000"]}, 0x200400c4) r23 = openat$cgroup_type(r3, &(0x7f0000000180), 0x2, 0x0) (async) gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="52f887651ed18c40c240624c4d4abb26aec166436e444c6b0dee77d6269a7720a854d9488433d33d", 0x28}, {&(0x7f00000003c0)="f88a7925ef85c0", 0x7}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000100000002000008", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r23, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r14, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r23, @ANYBLOB="1000000000000000010000000100000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r6], 0xe8, 0x44}, 0x40000) [ 2049.873306][T14005] FAULT_INJECTION: forcing a failure. [ 2049.873306][T14005] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.906411][T14005] CPU: 0 PID: 14005 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2049.916581][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2049.926478][T14005] Call Trace: [ 2049.929603][T14005] [ 2049.932377][T14005] dump_stack_lvl+0x151/0x1b7 [ 2049.936894][T14005] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2049.942361][T14005] dump_stack+0x15/0x17 [ 2049.946351][T14005] should_fail+0x3c6/0x510 [ 2049.950612][T14005] __should_failslab+0xa4/0xe0 [ 2049.955205][T14005] ? anon_vma_clone+0x9a/0x500 [ 2049.959805][T14005] should_failslab+0x9/0x20 [ 2049.964143][T14005] slab_pre_alloc_hook+0x37/0xd0 [ 2049.968930][T14005] ? anon_vma_clone+0x9a/0x500 05:20:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x8000) write$cgroup_type(r1, &(0x7f0000000200), 0x9) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='xdp_exception\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000600)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000966c0000000000000300000018240000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018600000010000000000000040000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xe1, 0xba, &(0x7f00000003c0)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1], &(0x7f0000000340)=[{0xe3, 0x2, 0x6, 0x4}, {0x5, 0x3, 0x3, 0x5}, {0x2, 0x5, 0x1, 0x9}, {0x1, 0x1, 0xb, 0xa}], 0x10, 0x10001}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000080)='./file0\x00', r5}, 0x18) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2049.973533][T14005] kmem_cache_alloc+0x44/0x200 [ 2049.978121][T14005] anon_vma_clone+0x9a/0x500 [ 2049.982547][T14005] anon_vma_fork+0x91/0x4e0 [ 2049.986887][T14005] ? anon_vma_name+0x4c/0x70 [ 2049.991310][T14005] ? vm_area_dup+0x17a/0x230 [ 2049.995737][T14005] copy_mm+0xa3a/0x13e0 [ 2049.999737][T14005] ? copy_signal+0x610/0x610 [ 2050.004154][T14005] ? __init_rwsem+0xd6/0x1c0 [ 2050.008584][T14005] ? copy_signal+0x4e3/0x610 [ 2050.013008][T14005] copy_process+0x1149/0x3290 [ 2050.017523][T14005] ? proc_fail_nth_write+0x20b/0x290 [ 2050.022642][T14005] ? fsnotify_perm+0x6a/0x5d0 [ 2050.027156][T14005] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2050.032101][T14005] ? vfs_write+0x9ec/0x1110 [ 2050.036446][T14005] kernel_clone+0x21e/0x9e0 [ 2050.040783][T14005] ? file_end_write+0x1c0/0x1c0 [ 2050.045472][T14005] ? create_io_thread+0x1e0/0x1e0 [ 2050.050333][T14005] ? mutex_unlock+0xb2/0x260 [ 2050.054757][T14005] ? __mutex_lock_slowpath+0x10/0x10 [ 2050.059882][T14005] __x64_sys_clone+0x23f/0x290 [ 2050.064485][T14005] ? __do_sys_vfork+0x130/0x130 [ 2050.069172][T14005] ? ksys_write+0x260/0x2c0 [ 2050.073518][T14005] ? debug_smp_processor_id+0x17/0x20 [ 2050.078713][T14005] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2050.084621][T14005] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2050.090077][T14005] do_syscall_64+0x3d/0xb0 [ 2050.094333][T14005] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2050.100056][T14005] RIP: 0033:0x7f3c5e561da9 [ 2050.104321][T14005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:20:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events.local\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair(0x0, 0xa, 0x5, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYRESDEC=r5, @ANYRES8, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r8], 0xb8}, 0x40002000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000b00)=[0x0], 0x0, 0x8f, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0xfffffd88, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8d0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xffe6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x9, 0x5, 0x7891f9dd, 0x81, r5, 0x5, '\x00', r9, r5, 0x4, 0x4, 0x1, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x1a, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0x5, 0x4, 0x0, 0xfffffffffffffef4, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdab}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000c40)=""/167, 0x41000, 0x40, '\x00', r9, 0x1a, r5, 0x8, &(0x7f0000000940)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x0, 0x20, 0x11}, 0x10, r10, r11, 0x6, 0x0, &(0x7f0000000d80)=[{0x0, 0x4, 0xb, 0xb}, {0x2, 0x1, 0xf}, {0x3, 0x1, 0x6, 0x1}, {0x8, 0x5, 0x6, 0xb}, {0x1, 0x1, 0x2000001}, {0x3, 0x4, 0x5, 0x8}], 0x10, 0x3}, 0x90) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0xc8, &(0x7f0000000100)=""/200}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000380)='\x00', 0x0}, 0x48) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r4, 0xfff, '\x00', 0x0, r0, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x5b, &(0x7f00000003c0)=""/91, 0x41000, 0x12, '\x00', 0x0, 0xd3da1357e2ae225a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x4}, 0x10, r10, r12, 0x3, &(0x7f0000000240)=[r4, r13], &(0x7f00000004c0)=[{0x4, 0x4, 0xc, 0x1}, {0x1, 0x3, 0xd, 0xc}, {0x1, 0x3, 0x2, 0x1}], 0x10, 0x3}, 0x90) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x2d) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2050.123754][T14005] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2050.131998][T14005] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2050.139814][T14005] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2050.147619][T14005] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2050.155430][T14005] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2050.163248][T14005] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2050.171061][T14005] 05:20:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 29) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:17 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x8000) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x8000) write$cgroup_type(r1, &(0x7f0000000200), 0x9) (async) write$cgroup_type(r1, &(0x7f0000000200), 0x9) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='xdp_exception\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000600)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000966c0000000000000300000018240000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018600000010000000000000040000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xe1, 0xba, &(0x7f00000003c0)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1], &(0x7f0000000340)=[{0xe3, 0x2, 0x6, 0x4}, {0x5, 0x3, 0x3, 0x5}, {0x2, 0x5, 0x1, 0x9}, {0x1, 0x1, 0xb, 0xa}], 0x10, 0x10001}, 0x90) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000966c0000000000000300000018240000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018600000010000000000000040000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xe1, 0xba, &(0x7f00000003c0)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1], &(0x7f0000000340)=[{0xe3, 0x2, 0x6, 0x4}, {0x5, 0x3, 0x3, 0x5}, {0x2, 0x5, 0x1, 0x9}, {0x1, 0x1, 0xb, 0xa}], 0x10, 0x10001}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000080)='./file0\x00', r5}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000080)='./file0\x00', r5}, 0x18) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:18 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x8000) write$cgroup_type(r1, &(0x7f0000000200), 0x9) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='xdp_exception\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000600)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000966c0000000000000300000018240000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018600000010000000000000040000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xe1, 0xba, &(0x7f00000003c0)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1], &(0x7f0000000340)=[{0xe3, 0x2, 0x6, 0x4}, {0x5, 0x3, 0x3, 0x5}, {0x2, 0x5, 0x1, 0x9}, {0x1, 0x1, 0xb, 0xa}], 0x10, 0x10001}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000080)='./file0\x00', r5}, 0x18) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x8000) (async) write$cgroup_type(r1, &(0x7f0000000200), 0x9) (async) close(r1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='xdp_exception\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000600)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000966c0000000000000300000018240000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018600000010000000000000040000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xe1, 0xba, &(0x7f00000003c0)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x10, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1], &(0x7f0000000340)=[{0xe3, 0x2, 0x6, 0x4}, {0x5, 0x3, 0x3, 0x5}, {0x2, 0x5, 0x1, 0x9}, {0x1, 0x1, 0xb, 0xa}], 0x10, 0x10001}, 0x90) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000080)='./file0\x00', r5}, 0x18) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) 05:20:18 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2050.418979][T14425] FAULT_INJECTION: forcing a failure. [ 2050.418979][T14425] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.478864][T14425] CPU: 1 PID: 14425 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2050.489034][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2050.498931][T14425] Call Trace: [ 2050.502051][T14425] [ 2050.504830][T14425] dump_stack_lvl+0x151/0x1b7 [ 2050.509344][T14425] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2050.514813][T14425] ? __alloc_pages+0x27e/0x8f0 [ 2050.519415][T14425] dump_stack+0x15/0x17 [ 2050.523404][T14425] should_fail+0x3c6/0x510 05:20:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x58, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0xfdef) (async) openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2050.527657][T14425] __should_failslab+0xa4/0xe0 [ 2050.532255][T14425] ? vm_area_dup+0x26/0x230 [ 2050.536594][T14425] should_failslab+0x9/0x20 [ 2050.540941][T14425] slab_pre_alloc_hook+0x37/0xd0 [ 2050.545712][T14425] ? vm_area_dup+0x26/0x230 [ 2050.550137][T14425] kmem_cache_alloc+0x44/0x200 [ 2050.554738][T14425] vm_area_dup+0x26/0x230 [ 2050.558903][T14425] copy_mm+0x9a1/0x13e0 [ 2050.562906][T14425] ? copy_signal+0x610/0x610 [ 2050.567319][T14425] ? __init_rwsem+0xd6/0x1c0 [ 2050.571746][T14425] ? copy_signal+0x4e3/0x610 [ 2050.576176][T14425] copy_process+0x1149/0x3290 [ 2050.580690][T14425] ? proc_fail_nth_write+0x20b/0x290 [ 2050.585810][T14425] ? fsnotify_perm+0x6a/0x5d0 [ 2050.590322][T14425] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2050.595270][T14425] ? vfs_write+0x9ec/0x1110 [ 2050.599608][T14425] kernel_clone+0x21e/0x9e0 [ 2050.603946][T14425] ? file_end_write+0x1c0/0x1c0 [ 2050.608632][T14425] ? create_io_thread+0x1e0/0x1e0 [ 2050.613496][T14425] ? mutex_unlock+0xb2/0x260 [ 2050.617922][T14425] ? __mutex_lock_slowpath+0x10/0x10 [ 2050.623049][T14425] __x64_sys_clone+0x23f/0x290 [ 2050.627644][T14425] ? __do_sys_vfork+0x130/0x130 [ 2050.632330][T14425] ? ksys_write+0x260/0x2c0 [ 2050.636671][T14425] ? debug_smp_processor_id+0x17/0x20 [ 2050.641880][T14425] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2050.647778][T14425] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2050.653254][T14425] do_syscall_64+0x3d/0xb0 [ 2050.657499][T14425] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2050.663223][T14425] RIP: 0033:0x7f3c5e561da9 [ 2050.667482][T14425] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2050.686924][T14425] RSP: 002b:00007f3c5d2c2078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2050.695340][T14425] RAX: ffffffffffffffda RBX: 00007f3c5e690050 RCX: 00007f3c5e561da9 [ 2050.703150][T14425] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2050.710962][T14425] RBP: 00007f3c5d2c2120 R08: 0000000000000000 R09: 0000000000000000 [ 2050.718775][T14425] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:18 executing program 4: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x101, 0x8}, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1805000000000000200000004b64ffec850000007d00000085000000070000b3e0bf2d9440f82133a30095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0xd, r9, 0x8, &(0x7f00000009c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x80002, 0x4, 0x37}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r9, r5, r9]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x5, 0x9, 0x5, 0x40, 0xffffffffffffffff, 0x100, '\x00', r7, r4, 0x0, 0x0, 0x5}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="1800040000060000000000eb03020085100000f8ff2187000000000000000000ea6d31379428ca2c59be4f8b9a0ffbd5450b19a39c035b1972a6ef84e146aaa23c93ef643fa7a603919dc8458d7952a5205480f1f572065641b4d4a107c3d07000dd0be186cc9b3971f87ac501f6ee0cca17f1459543bf6499962f0d0fc78d5800f37fd929dc6073cacaae906806ba8d6b80aab793296e6d69c9"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x42, '\x00', r7, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r10, r4], 0x0, 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC=r7, @ANYRES32, @ANYRES16=r6], &(0x7f0000000440)='syzkaller\x00', 0x1e, 0xe, &(0x7f0000000600)=""/14, 0x41000, 0x11, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x13}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x5, 0x9, 0x3}, 0x10, 0x0, r3, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xa, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008010000850064a4b23e0000bf91000000000040b7020000"], &(0x7f0000000680)='GPL\x00', 0x9, 0x0, &(0x7f0000000d80), 0x40f00, 0x3c, '\x00', r7, 0x2f, r9, 0x8, &(0x7f0000000dc0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0xd, 0x0, 0x8}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000000e40)=[r10, 0xffffffffffffffff], &(0x7f0000000e80)=[{0x4, 0x5, 0x1, 0x1}, {0x1, 0x3, 0x3, 0x9}]}, 0x90) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000800000183e0000010000000000000000000900"], &(0x7f0000000540)='syzkaller\x00', 0x5aea, 0x7a, &(0x7f00000000c0)=""/122, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x10, 0x7fffffff, 0x20}, 0x10, 0xba64, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x13, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xd6, &(0x7f00000003c0)=""/214, 0x40f00, 0xc, '\x00', r7, 0x0, r11, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xab6c}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r12], &(0x7f0000000500)=[{0x4, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xd, 0x2}, {0x0, 0x4, 0xf, 0xc}, {0x2, 0x3, 0xe, 0x6}, {0x1, 0x4, 0x6, 0x5}, {0x2, 0x4, 0x2, 0x6}, {0x4, 0x3, 0x5, 0x2}], 0x10, 0x3}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r13, &(0x7f0000000200), 0x43400) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2050.726586][T14425] R13: 000000000000006e R14: 00007f3c5e690050 R15: 00007fff895412b8 [ 2050.734401][T14425] 05:20:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 30) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:18 executing program 4: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x101, 0x8}, 0xc) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1805000000000000200000004b64ffec850000007d00000085000000070000b3e0bf2d9440f82133a30095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0xd, r9, 0x8, &(0x7f00000009c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x80002, 0x4, 0x37}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r9, r5, r9]}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x5, 0x9, 0x5, 0x40, 0xffffffffffffffff, 0x100, '\x00', r7, r4, 0x0, 0x0, 0x5}, 0x48) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="1800040000060000000000eb03020085100000f8ff2187000000000000000000ea6d31379428ca2c59be4f8b9a0ffbd5450b19a39c035b1972a6ef84e146aaa23c93ef643fa7a603919dc8458d7952a5205480f1f572065641b4d4a107c3d07000dd0be186cc9b3971f87ac501f6ee0cca17f1459543bf6499962f0d0fc78d5800f37fd929dc6073cacaae906806ba8d6b80aab793296e6d69c9"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x42, '\x00', r7, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r10, r4], 0x0, 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="060049990004122a9ebe1d93a1a1d544e9fb3acca1ecd3b894cb017496233b2cabc6e168b88f837381d301d37a29b281bb7f6fe1d44d4f1b788fcc9552744c3c4b53550600000000000000e9206f7caebc46b190b82a32fe58f2415a8ba7588942c1921079cec915a5b04f8e4b060000275af1d1dac1a543f68e03a6ada68bf62e5e6b3fadc054f863a68ef6d167ec5cf4ee0394c7aa33c2bbe9d462bbc7e64cbe02b20055f9c110368a70447c792e32dd6fc6e1708d3db56b9329262c706d98b872d572fed39ab1366438f6b185c67da9c5aed5802317d7fa9b7e44b99132572246c36b5018bd429cb3d1cd9d22c8c43c56bdb16402a910082fa19cadb90200b1de29028c46b862212b9e0bfe414734374d99285df13f17ce3e000000000000008a8723547b7667c56a649c0ffde318ebc5eb541c09eb34bea969fa678c91b28c1a8fc30a7c474f189ab96c77a751a4cfd00500c1eb1d480000000000004a0753c7ce96ef5820e1f108bcbd14135e9d7fbef83e98397981b5073fa7aa125f6d0824eef53f5b58e5a4a1c9f29917d0f1ff8074b1c837edd2e1a739f5a83b83460e4db0ded5ffcd33a310f0b552fbabe4b6d47fab5ec44207bcde53d37ce68e156c720417ff07348177e717033939350e2fdd01b92ea821799dd34f85f13cf087d024bc04834a5cf47d8f24a083b4912b0cd2f731a0a35941befb36a77d902a35f8b0a45eb9d4d779eb38fc99a5cf4964439cbf369903e41ea4a7d81dfc17c208d75c25ecdcf29169eabbf2c56d686a6e2b489162d40116ad157f7d2e29c865c665aa29449f39bbba693d2730997b243dd1f7cb9aad", @ANYRES32, @ANYRESDEC=r7, @ANYRES32, @ANYRES16=r6], &(0x7f0000000440)='syzkaller\x00', 0x1e, 0xe, &(0x7f0000000600)=""/14, 0x41000, 0x11, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x13}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x5, 0x9, 0x3}, 0x10, 0x0, r3, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xa, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008010000850064a4b23e0000bf91000000000040b7020000"], &(0x7f0000000680)='GPL\x00', 0x9, 0x0, &(0x7f0000000d80), 0x40f00, 0x3c, '\x00', r7, 0x2f, r9, 0x8, &(0x7f0000000dc0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0xd, 0x0, 0x8}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000000e40)=[r10, 0xffffffffffffffff], &(0x7f0000000e80)=[{0x4, 0x5, 0x1, 0x1}, {0x1, 0x3, 0x3, 0x9}]}, 0x90) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000800000183e0000010000000000000000000900"], &(0x7f0000000540)='syzkaller\x00', 0x5aea, 0x7a, &(0x7f00000000c0)=""/122, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x10, 0x7fffffff, 0x20}, 0x10, 0xba64, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x13, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xd6, &(0x7f00000003c0)=""/214, 0x40f00, 0xc, '\x00', r7, 0x0, r11, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xab6c}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r12], &(0x7f0000000500)=[{0x4, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xd, 0x2}, {0x0, 0x4, 0xf, 0xc}, {0x2, 0x3, 0xe, 0x6}, {0x1, 0x4, 0x6, 0x5}, {0x2, 0x4, 0x2, 0x6}, {0x4, 0x3, 0x5, 0x2}], 0x10, 0x3}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r13, &(0x7f0000000200), 0x43400) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2050.874351][T14616] FAULT_INJECTION: forcing a failure. [ 2050.874351][T14616] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.891877][T14616] CPU: 1 PID: 14616 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2050.902041][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2050.911939][T14616] Call Trace: [ 2050.915056][T14616] [ 2050.917839][T14616] dump_stack_lvl+0x151/0x1b7 [ 2050.922344][T14616] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2050.927816][T14616] dump_stack+0x15/0x17 [ 2050.931805][T14616] should_fail+0x3c6/0x510 [ 2050.936059][T14616] __should_failslab+0xa4/0xe0 [ 2050.940659][T14616] ? anon_vma_fork+0x1df/0x4e0 [ 2050.945261][T14616] should_failslab+0x9/0x20 [ 2050.949600][T14616] slab_pre_alloc_hook+0x37/0xd0 [ 2050.954373][T14616] ? anon_vma_fork+0x1df/0x4e0 [ 2050.958971][T14616] kmem_cache_alloc+0x44/0x200 [ 2050.963590][T14616] anon_vma_fork+0x1df/0x4e0 [ 2050.968002][T14616] copy_mm+0xa3a/0x13e0 [ 2050.971999][T14616] ? copy_signal+0x610/0x610 [ 2050.976427][T14616] ? __init_rwsem+0xd6/0x1c0 [ 2050.980843][T14616] ? copy_signal+0x4e3/0x610 [ 2050.985271][T14616] copy_process+0x1149/0x3290 [ 2050.989787][T14616] ? proc_fail_nth_write+0x20b/0x290 [ 2050.994903][T14616] ? fsnotify_perm+0x6a/0x5d0 [ 2050.999420][T14616] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2051.004369][T14616] ? vfs_write+0x9ec/0x1110 [ 2051.008711][T14616] kernel_clone+0x21e/0x9e0 [ 2051.013044][T14616] ? file_end_write+0x1c0/0x1c0 [ 2051.017734][T14616] ? create_io_thread+0x1e0/0x1e0 [ 2051.022590][T14616] ? mutex_unlock+0xb2/0x260 [ 2051.027017][T14616] ? __mutex_lock_slowpath+0x10/0x10 [ 2051.032144][T14616] __x64_sys_clone+0x23f/0x290 [ 2051.036739][T14616] ? __do_sys_vfork+0x130/0x130 [ 2051.041426][T14616] ? ksys_write+0x260/0x2c0 [ 2051.045768][T14616] ? debug_smp_processor_id+0x17/0x20 [ 2051.050971][T14616] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2051.056875][T14616] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2051.062344][T14616] do_syscall_64+0x3d/0xb0 [ 2051.066596][T14616] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2051.072323][T14616] RIP: 0033:0x7f3c5e561da9 [ 2051.076578][T14616] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2051.096019][T14616] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2051.104263][T14616] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2051.112076][T14616] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 31) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events.local\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) (async) socketpair(0x0, 0xa, 0x5, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (rerun: 64) recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYRESDEC=r5, @ANYRES8, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r8], 0xb8}, 0x40002000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000b00)=[0x0], 0x0, 0x8f, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0xfffffd88, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8d0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xffe6) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x9, 0x5, 0x7891f9dd, 0x81, r5, 0x5, '\x00', r9, r5, 0x4, 0x4, 0x1, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x1a, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0x5, 0x4, 0x0, 0xfffffffffffffef4, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdab}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000c40)=""/167, 0x41000, 0x40, '\x00', r9, 0x1a, r5, 0x8, &(0x7f0000000940)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x0, 0x20, 0x11}, 0x10, r10, r11, 0x6, 0x0, &(0x7f0000000d80)=[{0x0, 0x4, 0xb, 0xb}, {0x2, 0x1, 0xf}, {0x3, 0x1, 0x6, 0x1}, {0x8, 0x5, 0x6, 0xb}, {0x1, 0x1, 0x2000001}, {0x3, 0x4, 0x5, 0x8}], 0x10, 0x3}, 0x90) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0xc8, &(0x7f0000000100)=""/200}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000380)='\x00', 0x0}, 0x48) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r4, 0xfff, '\x00', 0x0, r0, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x5b, &(0x7f00000003c0)=""/91, 0x41000, 0x12, '\x00', 0x0, 0xd3da1357e2ae225a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x4}, 0x10, r10, r12, 0x3, &(0x7f0000000240)=[r4, r13], &(0x7f00000004c0)=[{0x4, 0x4, 0xc, 0x1}, {0x1, 0x3, 0xd, 0xc}, {0x1, 0x3, 0x2, 0x1}], 0x10, 0x3}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x2d) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 05:20:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2051.119886][T14616] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2051.127698][T14616] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2051.135510][T14616] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2051.143325][T14616] 05:20:18 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x101, 0x8}, 0xc) (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x101, 0x8}, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1805000000000000200000004b64ffec850000007d00000085000000070000b3e0bf2d9440f82133a30095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0xd, r9, 0x8, &(0x7f00000009c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x80002, 0x4, 0x37}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r9, r5, r9]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0xd, r9, 0x8, &(0x7f00000009c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x80002, 0x4, 0x37}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, r9, r5, r9]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x5, 0x9, 0x5, 0x40, 0xffffffffffffffff, 0x100, '\x00', r7, r4, 0x0, 0x0, 0x5}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="1800040000060000000000eb03020085100000f8ff2187000000000000000000ea6d31379428ca2c59be4f8b9a0ffbd5450b19a39c035b1972a6ef84e146aaa23c93ef643fa7a603919dc8458d7952a5205480f1f572065641b4d4a107c3d07000dd0be186cc9b3971f87ac501f6ee0cca17f1459543bf6499962f0d0fc78d5800f37fd929dc6073cacaae906806ba8d6b80aab793296e6d69c9"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x42, '\x00', r7, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r10, r4], 0x0, 0x10, 0x4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="1800040000060000000000eb03020085100000f8ff2187000000000000000000ea6d31379428ca2c59be4f8b9a0ffbd5450b19a39c035b1972a6ef84e146aaa23c93ef643fa7a603919dc8458d7952a5205480f1f572065641b4d4a107c3d07000dd0be186cc9b3971f87ac501f6ee0cca17f1459543bf6499962f0d0fc78d5800f37fd929dc6073cacaae906806ba8d6b80aab793296e6d69c9"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x42, '\x00', r7, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r10, r4], 0x0, 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC=r7, @ANYRES32, @ANYRES16=r6], &(0x7f0000000440)='syzkaller\x00', 0x1e, 0xe, &(0x7f0000000600)=""/14, 0x41000, 0x11, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x13}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x5, 0x9, 0x3}, 0x10, 0x0, r3, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="060049990004122a9ebe1d93a1a1d544e9fb3acca1ecd3b894cb017496233b2cabc6e168b88f837381d301d37a29b281bb7f6fe1d44d4f1b788fcc9552744c3c4b53550600000000000000e9206f7caebc46b190b82a32fe58f2415a8ba7588942c1921079cec915a5b04f8e4b060000275af1d1dac1a543f68e03a6ada68bf62e5e6b3fadc054f863a68ef6d167ec5cf4ee0394c7aa33c2bbe9d462bbc7e64cbe02b20055f9c110368a70447c792e32dd6fc6e1708d3db56b9329262c706d98b872d572fed39ab1366438f6b185c67da9c5aed5802317d7fa9b7e44b99132572246c36b5018bd429cb3d1cd9d22c8c43c56bdb16402a910082fa19cadb90200b1de29028c46b862212b9e0bfe414734374d99285df13f17ce3e000000000000008a8723547b7667c56a649c0ffde318ebc5eb541c09eb34bea969fa678c91b28c1a8fc30a7c474f189ab96c77a751a4cfd00500c1eb1d480000000000004a0753c7ce96ef5820e1f108bcbd14135e9d7fbef83e98397981b5073fa7aa125f6d0824eef53f5b58e5a4a1c9f29917d0f1ff8074b1c837edd2e1a739f5a83b83460e4db0ded5ffcd33a310f0b552fbabe4b6d47fab5ec44207bcde53d37ce68e156c720417ff07348177e717033939350e2fdd01b92ea821799dd34f85f13cf087d024bc04834a5cf47d8f24a083b4912b0cd2f731a0a35941befb36a77d902a35f8b0a45eb9d4d779eb38fc99a5cf4964439cbf369903e41ea4a7d81dfc17c208d75c25ecdcf29169eabbf2c56d686a6e2b489162d40116ad157f7d2e29c865c665aa29449f39bbba693d2730997b243dd1f7cb9aad", @ANYRES32, @ANYRESDEC=r7, @ANYRES32, @ANYRES16=r6], &(0x7f0000000440)='syzkaller\x00', 0x1e, 0xe, &(0x7f0000000600)=""/14, 0x41000, 0x11, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x13}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x5, 0x9, 0x3}, 0x10, 0x0, r3, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xa, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008010000850064a4b23e0000bf91000000000040b7020000"], &(0x7f0000000680)='GPL\x00', 0x9, 0x0, &(0x7f0000000d80), 0x40f00, 0x3c, '\x00', r7, 0x2f, r9, 0x8, &(0x7f0000000dc0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0xd, 0x0, 0x8}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000000e40)=[r10, 0xffffffffffffffff], &(0x7f0000000e80)=[{0x4, 0x5, 0x1, 0x1}, {0x1, 0x3, 0x3, 0x9}]}, 0x90) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000800000183e0000010000000000000000000900"], &(0x7f0000000540)='syzkaller\x00', 0x5aea, 0x7a, &(0x7f00000000c0)=""/122, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x10, 0x7fffffff, 0x20}, 0x10, 0xba64, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0xd, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000800000183e0000010000000000000000000900"], &(0x7f0000000540)='syzkaller\x00', 0x5aea, 0x7a, &(0x7f00000000c0)=""/122, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x10, 0x7fffffff, 0x20}, 0x10, 0xba64, 0xffffffffffffffff, 0x0, &(0x7f0000000f00)=[r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x13, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xd6, &(0x7f00000003c0)=""/214, 0x40f00, 0xc, '\x00', r7, 0x0, r11, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xab6c}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r12], &(0x7f0000000500)=[{0x4, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xd, 0x2}, {0x0, 0x4, 0xf, 0xc}, {0x2, 0x3, 0xe, 0x6}, {0x1, 0x4, 0x6, 0x5}, {0x2, 0x4, 0x2, 0x6}, {0x4, 0x3, 0x5, 0x2}], 0x10, 0x3}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r13, &(0x7f0000000200), 0x43400) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2051.206360][T14730] FAULT_INJECTION: forcing a failure. [ 2051.206360][T14730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2051.231306][T14730] CPU: 0 PID: 14730 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2051.241473][T14730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2051.251368][T14730] Call Trace: 05:20:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x4004662b, &(0x7f00000005c0)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6f64bc95, 0x0, 0x0, 0x0, 0x60000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x1c}, @alu={0x4, 0x1, 0xb, 0x4, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xd4, &(0x7f00000003c0)=""/212, 0x41000, 0x14, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0x9, 0x241f2ad2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[r7, r8, r9, r10, r11, r12], &(0x7f00000008c0)=[{0x5, 0x4, 0xf, 0xb}, {0x5, 0x5, 0x2, 0x4}, {0x4, 0x2, 0xb, 0x9}, {0x2, 0x5, 0xf, 0x2}], 0x10, 0x5}, 0x90) [ 2051.254489][T14730] [ 2051.257268][T14730] dump_stack_lvl+0x151/0x1b7 [ 2051.261785][T14730] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2051.267253][T14730] dump_stack+0x15/0x17 [ 2051.271242][T14730] should_fail+0x3c6/0x510 [ 2051.275496][T14730] should_fail_alloc_page+0x5a/0x80 [ 2051.280529][T14730] prepare_alloc_pages+0x15c/0x700 [ 2051.285479][T14730] ? __alloc_pages_bulk+0xe40/0xe40 [ 2051.290512][T14730] __alloc_pages+0x18c/0x8f0 [ 2051.294936][T14730] ? prep_new_page+0x110/0x110 [ 2051.299542][T14730] get_zeroed_page+0x1b/0x40 05:20:19 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2051.303960][T14730] __pud_alloc+0x8b/0x260 [ 2051.308129][T14730] ? stack_trace_snprint+0xf0/0xf0 [ 2051.313076][T14730] ? do_handle_mm_fault+0x2330/0x2330 [ 2051.318283][T14730] ? __stack_depot_save+0x34/0x470 [ 2051.323229][T14730] ? anon_vma_clone+0x9a/0x500 [ 2051.327831][T14730] copy_page_range+0x2bcf/0x2f90 [ 2051.332604][T14730] ? __kasan_slab_alloc+0xb1/0xe0 [ 2051.337462][T14730] ? slab_post_alloc_hook+0x53/0x2c0 [ 2051.342584][T14730] ? copy_mm+0xa3a/0x13e0 [ 2051.346749][T14730] ? copy_process+0x1149/0x3290 [ 2051.351437][T14730] ? kernel_clone+0x21e/0x9e0 [ 2051.355948][T14730] ? __x64_sys_clone+0x23f/0x290 [ 2051.360723][T14730] ? do_syscall_64+0x3d/0xb0 [ 2051.365149][T14730] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2051.371067][T14730] ? pfn_valid+0x1e0/0x1e0 [ 2051.375308][T14730] ? rwsem_write_trylock+0x15b/0x290 [ 2051.380426][T14730] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2051.386677][T14730] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2051.392231][T14730] ? __rb_insert_augmented+0x5de/0x610 [ 2051.397533][T14730] copy_mm+0xc7e/0x13e0 [ 2051.401523][T14730] ? copy_signal+0x610/0x610 [ 2051.405943][T14730] ? __init_rwsem+0xd6/0x1c0 [ 2051.410372][T14730] ? copy_signal+0x4e3/0x610 [ 2051.414798][T14730] copy_process+0x1149/0x3290 [ 2051.419313][T14730] ? proc_fail_nth_write+0x20b/0x290 [ 2051.424432][T14730] ? fsnotify_perm+0x6a/0x5d0 [ 2051.428945][T14730] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2051.433894][T14730] ? vfs_write+0x9ec/0x1110 [ 2051.438233][T14730] kernel_clone+0x21e/0x9e0 [ 2051.442573][T14730] ? file_end_write+0x1c0/0x1c0 [ 2051.447259][T14730] ? create_io_thread+0x1e0/0x1e0 [ 2051.452116][T14730] ? mutex_unlock+0xb2/0x260 [ 2051.456545][T14730] ? __mutex_lock_slowpath+0x10/0x10 [ 2051.461667][T14730] __x64_sys_clone+0x23f/0x290 [ 2051.466266][T14730] ? __do_sys_vfork+0x130/0x130 [ 2051.470951][T14730] ? ksys_write+0x260/0x2c0 [ 2051.475292][T14730] ? debug_smp_processor_id+0x17/0x20 [ 2051.480499][T14730] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2051.486411][T14730] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2051.491869][T14730] do_syscall_64+0x3d/0xb0 [ 2051.496119][T14730] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2051.501846][T14730] RIP: 0033:0x7f3c5e561da9 [ 2051.506100][T14730] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2051.525539][T14730] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2051.533787][T14730] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2051.541602][T14730] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2051.549414][T14730] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 32) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2051.557219][T14730] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2051.565031][T14730] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2051.572849][T14730] 05:20:19 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='thread_noise\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2051.728280][T14754] FAULT_INJECTION: forcing a failure. [ 2051.728280][T14754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2051.743132][T14754] CPU: 1 PID: 14754 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2051.753288][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2051.763182][T14754] Call Trace: [ 2051.766300][T14754] [ 2051.769083][T14754] dump_stack_lvl+0x151/0x1b7 [ 2051.773591][T14754] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2051.779066][T14754] dump_stack+0x15/0x17 [ 2051.783057][T14754] should_fail+0x3c6/0x510 [ 2051.787305][T14754] should_fail_alloc_page+0x5a/0x80 [ 2051.792341][T14754] prepare_alloc_pages+0x15c/0x700 [ 2051.797288][T14754] ? __alloc_pages_bulk+0xe40/0xe40 [ 2051.802320][T14754] __alloc_pages+0x18c/0x8f0 [ 2051.806749][T14754] ? prep_new_page+0x110/0x110 [ 2051.811346][T14754] ? __alloc_pages+0x27e/0x8f0 [ 2051.815950][T14754] ? __kasan_check_write+0x14/0x20 [ 2051.820903][T14754] ? _raw_spin_lock+0xa4/0x1b0 [ 2051.825495][T14754] __pmd_alloc+0xb1/0x550 [ 2051.830083][T14754] ? __pud_alloc+0x260/0x260 [ 2051.834517][T14754] ? __pud_alloc+0x213/0x260 [ 2051.838944][T14754] ? do_handle_mm_fault+0x2330/0x2330 [ 2051.844158][T14754] ? __stack_depot_save+0x34/0x470 [ 2051.849102][T14754] ? anon_vma_clone+0x9a/0x500 [ 2051.853701][T14754] copy_page_range+0x2b3d/0x2f90 [ 2051.858472][T14754] ? __kasan_slab_alloc+0xb1/0xe0 [ 2051.863332][T14754] ? slab_post_alloc_hook+0x53/0x2c0 [ 2051.868458][T14754] ? copy_mm+0xa3a/0x13e0 [ 2051.872631][T14754] ? copy_process+0x1149/0x3290 [ 2051.877393][T14754] ? kernel_clone+0x21e/0x9e0 [ 2051.881908][T14754] ? do_syscall_64+0x3d/0xb0 [ 2051.886338][T14754] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2051.892244][T14754] ? pfn_valid+0x1e0/0x1e0 [ 2051.896495][T14754] ? rwsem_write_trylock+0x15b/0x290 [ 2051.901611][T14754] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2051.907878][T14754] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2051.913415][T14754] ? __rb_insert_augmented+0x5de/0x610 [ 2051.918799][T14754] copy_mm+0xc7e/0x13e0 [ 2051.922790][T14754] ? copy_signal+0x610/0x610 [ 2051.927215][T14754] ? __init_rwsem+0xd6/0x1c0 [ 2051.931644][T14754] ? copy_signal+0x4e3/0x610 [ 2051.936074][T14754] copy_process+0x1149/0x3290 [ 2051.940583][T14754] ? proc_fail_nth_write+0x20b/0x290 [ 2051.945708][T14754] ? fsnotify_perm+0x6a/0x5d0 [ 2051.950214][T14754] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2051.955159][T14754] ? vfs_write+0x9ec/0x1110 [ 2051.959504][T14754] kernel_clone+0x21e/0x9e0 [ 2051.963842][T14754] ? file_end_write+0x1c0/0x1c0 [ 2051.968528][T14754] ? create_io_thread+0x1e0/0x1e0 [ 2051.973399][T14754] ? mutex_unlock+0xb2/0x260 [ 2051.977901][T14754] ? __mutex_lock_slowpath+0x10/0x10 [ 2051.983022][T14754] __x64_sys_clone+0x23f/0x290 [ 2051.987622][T14754] ? __do_sys_vfork+0x130/0x130 [ 2051.992310][T14754] ? ksys_write+0x260/0x2c0 [ 2051.996652][T14754] ? debug_smp_processor_id+0x17/0x20 [ 2052.001862][T14754] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2052.007758][T14754] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2052.013224][T14754] do_syscall_64+0x3d/0xb0 [ 2052.017479][T14754] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2052.023207][T14754] RIP: 0033:0x7f3c5e561da9 [ 2052.027462][T14754] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2052.046903][T14754] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2052.055145][T14754] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2052.062959][T14754] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2052.070771][T14754] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="006905f7ca6f203e637075202d626c6b696f202b637075202b63707520c766ef0c382b8941ca0806bf65f1b6e06c50c36d6f8fff53f36556c68978151a0a6de8ca5b9aad29a5e3b91945b988fcb7ded4ae32fdc54c63ce6cb6f30d9576a021137424fe1605bbce6e60b49456e4c68d53b275ce5be0144b110ab3376d6fe3c3ee995dae43edba44d04f0034907ca8539ffaf24f0866023091b82a8341c5ce41610b08ee78ceab628b9dca3918cf4f72932140bd85ddd12b0d"], 0x1a) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000000c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x40012100) 05:20:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x90) (async, rerun: 32) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x48) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x4004662b, &(0x7f00000005c0)=0x1) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6f64bc95, 0x0, 0x0, 0x0, 0x60000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x1c}, @alu={0x4, 0x1, 0xb, 0x4, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xd4, &(0x7f00000003c0)=""/212, 0x41000, 0x14, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0x9, 0x241f2ad2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[r7, r8, r9, r10, r11, r12], &(0x7f00000008c0)=[{0x5, 0x4, 0xf, 0xb}, {0x5, 0x5, 0x2, 0x4}, {0x4, 0x2, 0xb, 0x9}, {0x2, 0x5, 0xf, 0x2}], 0x10, 0x5}, 0x90) 05:20:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 33) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2052.078582][T14754] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2052.086430][T14754] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2052.094210][T14754] 05:20:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="006905f7ca6f203e637075202d626c6b696f202b637075202b63707520c766ef0c382b8941ca0806bf65f1b6e06c50c36d6f8fff53f36556c68978151a0a6de8ca5b9aad29a5e3b91945b988fcb7ded4ae32fdc54c63ce6cb6f30d9576a021137424fe1605bbce6e60b49456e4c68d53b275ce5be0144b110ab3376d6fe3c3ee995dae43edba44d04f0034907ca8539ffaf24f0866023091b82a8341c5ce41610b08ee78ceab628b9dca3918cf4f72932140bd85ddd12b0d"], 0x1a) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000000c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x40012100) 05:20:19 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='thread_noise\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='thread_noise\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 2052.135720][T14780] FAULT_INJECTION: forcing a failure. [ 2052.135720][T14780] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2052.160823][T14780] CPU: 0 PID: 14780 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2052.170995][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2052.180887][T14780] Call Trace: [ 2052.184008][T14780] [ 2052.186788][T14780] dump_stack_lvl+0x151/0x1b7 [ 2052.191304][T14780] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2052.196772][T14780] dump_stack+0x15/0x17 [ 2052.200758][T14780] should_fail+0x3c6/0x510 [ 2052.205016][T14780] should_fail_alloc_page+0x5a/0x80 [ 2052.210047][T14780] prepare_alloc_pages+0x15c/0x700 [ 2052.214997][T14780] ? __alloc_pages_bulk+0xe40/0xe40 [ 2052.220030][T14780] __alloc_pages+0x18c/0x8f0 [ 2052.224454][T14780] ? prep_new_page+0x110/0x110 [ 2052.229055][T14780] ? __alloc_pages+0x27e/0x8f0 05:20:19 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2052.233655][T14780] ? __kasan_check_write+0x14/0x20 [ 2052.238603][T14780] ? _raw_spin_lock+0xa4/0x1b0 [ 2052.243198][T14780] pte_alloc_one+0x73/0x1b0 [ 2052.247540][T14780] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2052.252575][T14780] ? __pmd_alloc+0x48d/0x550 [ 2052.257001][T14780] __pte_alloc+0x86/0x350 [ 2052.261166][T14780] ? __pud_alloc+0x260/0x260 [ 2052.265593][T14780] ? __pud_alloc+0x213/0x260 [ 2052.270023][T14780] ? free_pgtables+0x280/0x280 [ 2052.274621][T14780] ? do_handle_mm_fault+0x2330/0x2330 [ 2052.279829][T14780] ? __stack_depot_save+0x34/0x470 [ 2052.284774][T14780] ? anon_vma_clone+0x9a/0x500 [ 2052.289377][T14780] copy_page_range+0x28a8/0x2f90 [ 2052.294148][T14780] ? __kasan_slab_alloc+0xb1/0xe0 [ 2052.299010][T14780] ? slab_post_alloc_hook+0x53/0x2c0 [ 2052.304129][T14780] ? kernel_clone+0x21e/0x9e0 [ 2052.308643][T14780] ? do_syscall_64+0x3d/0xb0 [ 2052.313074][T14780] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2052.318981][T14780] ? pfn_valid+0x1e0/0x1e0 [ 2052.323228][T14780] ? rwsem_write_trylock+0x15b/0x290 [ 2052.328362][T14780] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2052.334615][T14780] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2052.340151][T14780] ? __rb_insert_augmented+0x5de/0x610 [ 2052.345445][T14780] copy_mm+0xc7e/0x13e0 [ 2052.349435][T14780] ? copy_signal+0x610/0x610 [ 2052.353857][T14780] ? __init_rwsem+0xd6/0x1c0 [ 2052.358285][T14780] ? copy_signal+0x4e3/0x610 [ 2052.362713][T14780] copy_process+0x1149/0x3290 [ 2052.367225][T14780] ? proc_fail_nth_write+0x20b/0x290 [ 2052.372346][T14780] ? fsnotify_perm+0x6a/0x5d0 [ 2052.376859][T14780] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2052.381804][T14780] ? vfs_write+0x9ec/0x1110 [ 2052.386146][T14780] kernel_clone+0x21e/0x9e0 [ 2052.390483][T14780] ? file_end_write+0x1c0/0x1c0 [ 2052.395171][T14780] ? create_io_thread+0x1e0/0x1e0 [ 2052.400032][T14780] ? mutex_unlock+0xb2/0x260 [ 2052.404459][T14780] ? __mutex_lock_slowpath+0x10/0x10 [ 2052.409582][T14780] __x64_sys_clone+0x23f/0x290 [ 2052.414274][T14780] ? __do_sys_vfork+0x130/0x130 [ 2052.418951][T14780] ? ksys_write+0x260/0x2c0 [ 2052.423294][T14780] ? debug_smp_processor_id+0x17/0x20 [ 2052.428499][T14780] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2052.434403][T14780] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2052.439870][T14780] do_syscall_64+0x3d/0xb0 [ 2052.444125][T14780] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2052.449857][T14780] RIP: 0033:0x7f3c5e561da9 [ 2052.454105][T14780] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2052.473546][T14780] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x4004662b, &(0x7f00000005c0)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6f64bc95, 0x0, 0x0, 0x0, 0x60000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x1c}, @alu={0x4, 0x1, 0xb, 0x4, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0xd4, &(0x7f00000003c0)=""/212, 0x41000, 0x14, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x1, 0x9, 0x241f2ad2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[r7, r8, r9, r10, r11, r12], &(0x7f00000008c0)=[{0x5, 0x4, 0xf, 0xb}, {0x5, 0x5, 0x2, 0x4}, {0x4, 0x2, 0xb, 0x9}, {0x2, 0x5, 0xf, 0x2}], 0x10, 0x5}, 0x90) 05:20:20 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="006905f7ca6f203e637075202d626c6b696f202b637075202b63707520c766ef0c382b8941ca0806bf65f1b6e06c50c36d6f8fff53f36556c68978151a0a6de8ca5b9aad29a5e3b91945b988fcb7ded4ae32fdc54c63ce6cb6f30d9576a021137424fe1605bbce6e60b49456e4c68d53b275ce5be0144b110ab3376d6fe3c3ee995dae43edba44d04f0034907ca8539ffaf24f0866023091b82a8341c5ce41610b08ee78ceab628b9dca3918cf4f72932140bd85ddd12b0d"], 0x1a) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000000c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000440)=""/190, 0xbe}], 0x5, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x40012100) 05:20:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 34) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2052.481791][T14780] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2052.489601][T14780] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2052.497412][T14780] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2052.505225][T14780] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2052.513036][T14780] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2052.520852][T14780] 05:20:20 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='thread_noise\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='thread_noise\x00', r3}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) 05:20:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) openat$cgroup_devices(r1, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x16, &(0x7f00000000c0)=@raw=[@generic={0x5, 0xc, 0x9, 0x0, 0x80000001}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @generic={0x7, 0x4, 0x8, 0x1, 0x7fffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xc8}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x9, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x7673c7ed8b5a62a0, '\x00', r3, 0x12, r2, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x8, 0x7, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2, 0x8, 0x0, &(0x7f0000000640)=[{0x1, 0x2, 0x4, 0x9}, {0x5, 0x5, 0x3, 0x8}, {0x5, 0x1, 0x6, 0x3}, {0x4, 0x5, 0x5, 0x8}, {0x1, 0x1, 0x3, 0x1}, {0x5, 0x4, 0xa, 0xb}, {0x4, 0x4, 0x2, 0xa}, {0x4, 0x3, 0x0, 0x2}], 0x10, 0x7fff}, 0x90) 05:20:20 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x4, 0x3, 0x3f, 0x0, 0x8, 0x10400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x104800, 0x4, 0x1, 0x3, 0x556, 0x5, 0x9, 0x0, 0x9, 0x0, 0x8000000000000000}, r3, 0xffffffffffffffff, r0, 0x8) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x6, 0x1, 0x92, 0x81, 0x0, 0x1, 0x80001, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x80000001, 0x7}, 0x4000, 0x9d6, 0x3, 0x1, 0x80000001, 0x6, 0x8e, 0x0, 0x1f, 0x0, 0x100000001}, 0x0, 0x1, r4, 0x6) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x20000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000180)}, 0x10, 0x2, 0x5b4, 0x4, 0x8, 0x3, 0x9, 0x0, 0xffffff3e, 0x0, 0x80000001}, r1, 0x5, r6, 0x0) [ 2052.600090][T14997] FAULT_INJECTION: forcing a failure. [ 2052.600090][T14997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2052.615970][T14997] CPU: 1 PID: 14997 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2052.626116][T14997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2052.636020][T14997] Call Trace: [ 2052.639135][T14997] [ 2052.641928][T14997] dump_stack_lvl+0x151/0x1b7 [ 2052.646426][T14997] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2052.651904][T14997] dump_stack+0x15/0x17 [ 2052.655887][T14997] should_fail+0x3c6/0x510 [ 2052.660141][T14997] should_fail_alloc_page+0x5a/0x80 [ 2052.665174][T14997] prepare_alloc_pages+0x15c/0x700 [ 2052.670122][T14997] ? __alloc_pages_bulk+0xe40/0xe40 [ 2052.675156][T14997] __alloc_pages+0x18c/0x8f0 [ 2052.679583][T14997] ? prep_new_page+0x110/0x110 [ 2052.684180][T14997] ? __alloc_pages+0x27e/0x8f0 [ 2052.688784][T14997] ? __kasan_check_write+0x14/0x20 [ 2052.693737][T14997] ? _raw_spin_lock+0xa4/0x1b0 [ 2052.698339][T14997] __pmd_alloc+0xb1/0x550 [ 2052.702496][T14997] ? __pud_alloc+0x260/0x260 [ 2052.706919][T14997] ? __pud_alloc+0x213/0x260 [ 2052.711359][T14997] ? do_handle_mm_fault+0x2330/0x2330 [ 2052.716556][T14997] ? __stack_depot_save+0x34/0x470 [ 2052.721502][T14997] ? anon_vma_clone+0x9a/0x500 [ 2052.726105][T14997] copy_page_range+0x2b3d/0x2f90 [ 2052.730878][T14997] ? __kasan_slab_alloc+0xb1/0xe0 [ 2052.735734][T14997] ? slab_post_alloc_hook+0x53/0x2c0 [ 2052.740864][T14997] ? copy_mm+0xa3a/0x13e0 [ 2052.745020][T14997] ? copy_process+0x1149/0x3290 [ 2052.749708][T14997] ? kernel_clone+0x21e/0x9e0 [ 2052.754221][T14997] ? do_syscall_64+0x3d/0xb0 [ 2052.758648][T14997] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2052.764558][T14997] ? pfn_valid+0x1e0/0x1e0 [ 2052.768806][T14997] ? rwsem_write_trylock+0x15b/0x290 [ 2052.773925][T14997] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2052.780178][T14997] copy_mm+0xc7e/0x13e0 [ 2052.784171][T14997] ? copy_signal+0x610/0x610 [ 2052.788592][T14997] ? __init_rwsem+0xd6/0x1c0 [ 2052.793018][T14997] ? copy_signal+0x4e3/0x610 [ 2052.797447][T14997] copy_process+0x1149/0x3290 [ 2052.801960][T14997] ? proc_fail_nth_write+0x20b/0x290 [ 2052.807080][T14997] ? fsnotify_perm+0x6a/0x5d0 [ 2052.811594][T14997] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2052.816541][T14997] ? vfs_write+0x9ec/0x1110 [ 2052.820882][T14997] kernel_clone+0x21e/0x9e0 [ 2052.825221][T14997] ? file_end_write+0x1c0/0x1c0 [ 2052.829907][T14997] ? create_io_thread+0x1e0/0x1e0 [ 2052.834766][T14997] ? mutex_unlock+0xb2/0x260 [ 2052.839195][T14997] ? __mutex_lock_slowpath+0x10/0x10 [ 2052.844317][T14997] __x64_sys_clone+0x23f/0x290 [ 2052.848917][T14997] ? __do_sys_vfork+0x130/0x130 [ 2052.853599][T14997] ? ksys_write+0x260/0x2c0 [ 2052.857944][T14997] ? debug_smp_processor_id+0x17/0x20 [ 2052.863152][T14997] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2052.869054][T14997] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2052.874520][T14997] do_syscall_64+0x3d/0xb0 [ 2052.878774][T14997] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2052.884500][T14997] RIP: 0033:0x7f3c5e561da9 [ 2052.888756][T14997] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2052.908194][T14997] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2052.916439][T14997] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2052.924251][T14997] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2052.932064][T14997] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2052.939876][T14997] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 35) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2052.947686][T14997] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2052.955504][T14997] 05:20:20 executing program 2: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) openat$cgroup_devices(r1, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x16, &(0x7f00000000c0)=@raw=[@generic={0x5, 0xc, 0x9, 0x0, 0x80000001}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @generic={0x7, 0x4, 0x8, 0x1, 0x7fffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xc8}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x9, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x7673c7ed8b5a62a0, '\x00', r3, 0x12, r2, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x8, 0x7, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2, 0x8, 0x0, &(0x7f0000000640)=[{0x1, 0x2, 0x4, 0x9}, {0x5, 0x5, 0x3, 0x8}, {0x5, 0x1, 0x6, 0x3}, {0x4, 0x5, 0x5, 0x8}, {0x1, 0x1, 0x3, 0x1}, {0x5, 0x4, 0xa, 0xb}, {0x4, 0x4, 0x2, 0xa}, {0x4, 0x3, 0x0, 0x2}], 0x10, 0x7fff}, 0x90) [ 2052.994133][T15011] FAULT_INJECTION: forcing a failure. [ 2052.994133][T15011] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.012162][T15011] CPU: 0 PID: 15011 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2053.022326][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2053.032212][T15011] Call Trace: [ 2053.035338][T15011] [ 2053.038113][T15011] dump_stack_lvl+0x151/0x1b7 [ 2053.042630][T15011] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2053.048096][T15011] ? avc_denied+0x1b0/0x1b0 [ 2053.052437][T15011] dump_stack+0x15/0x17 [ 2053.056428][T15011] should_fail+0x3c6/0x510 [ 2053.060682][T15011] __should_failslab+0xa4/0xe0 [ 2053.065279][T15011] ? vm_area_dup+0x26/0x230 [ 2053.069619][T15011] should_failslab+0x9/0x20 [ 2053.073960][T15011] slab_pre_alloc_hook+0x37/0xd0 [ 2053.078734][T15011] ? vm_area_dup+0x26/0x230 [ 2053.083071][T15011] kmem_cache_alloc+0x44/0x200 [ 2053.087675][T15011] vm_area_dup+0x26/0x230 05:20:20 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2053.091840][T15011] copy_mm+0x9a1/0x13e0 [ 2053.095839][T15011] ? copy_signal+0x610/0x610 [ 2053.100259][T15011] ? __init_rwsem+0xd6/0x1c0 [ 2053.104688][T15011] ? copy_signal+0x4e3/0x610 [ 2053.109111][T15011] copy_process+0x1149/0x3290 [ 2053.113628][T15011] ? proc_fail_nth_write+0x20b/0x290 [ 2053.118745][T15011] ? fsnotify_perm+0x6a/0x5d0 [ 2053.123262][T15011] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2053.128207][T15011] ? vfs_write+0x9ec/0x1110 [ 2053.132548][T15011] kernel_clone+0x21e/0x9e0 [ 2053.136884][T15011] ? file_end_write+0x1c0/0x1c0 [ 2053.141570][T15011] ? create_io_thread+0x1e0/0x1e0 [ 2053.146428][T15011] ? mutex_unlock+0xb2/0x260 [ 2053.150859][T15011] ? __mutex_lock_slowpath+0x10/0x10 [ 2053.155983][T15011] __x64_sys_clone+0x23f/0x290 [ 2053.160580][T15011] ? __do_sys_vfork+0x130/0x130 [ 2053.165265][T15011] ? ksys_write+0x260/0x2c0 [ 2053.169610][T15011] ? debug_smp_processor_id+0x17/0x20 [ 2053.174812][T15011] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2053.180715][T15011] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2053.186184][T15011] do_syscall_64+0x3d/0xb0 05:20:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x4, 0x3, 0x3f, 0x0, 0x8, 0x10400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x104800, 0x4, 0x1, 0x3, 0x556, 0x5, 0x9, 0x0, 0x9, 0x0, 0x8000000000000000}, r3, 0xffffffffffffffff, r0, 0x8) (async) r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x4, 0x3, 0x3f, 0x0, 0x8, 0x10400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x104800, 0x4, 0x1, 0x3, 0x556, 0x5, 0x9, 0x0, 0x9, 0x0, 0x8000000000000000}, r3, 0xffffffffffffffff, r0, 0x8) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x6, 0x1, 0x92, 0x81, 0x0, 0x1, 0x80001, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x80000001, 0x7}, 0x4000, 0x9d6, 0x3, 0x1, 0x80000001, 0x6, 0x8e, 0x0, 0x1f, 0x0, 0x100000001}, 0x0, 0x1, r4, 0x6) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x20000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000180)}, 0x10, 0x2, 0x5b4, 0x4, 0x8, 0x3, 0x9, 0x0, 0xffffff3e, 0x0, 0x80000001}, r1, 0x5, r6, 0x0) [ 2053.190437][T15011] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2053.196165][T15011] RIP: 0033:0x7f3c5e561da9 [ 2053.200418][T15011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2053.219860][T15011] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2053.228103][T15011] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2053.235914][T15011] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:20 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xff, 0x4, 0x3, 0x3f, 0x0, 0x8, 0x10400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x104800, 0x4, 0x1, 0x3, 0x556, 0x5, 0x9, 0x0, 0x9, 0x0, 0x8000000000000000}, r3, 0xffffffffffffffff, r0, 0x8) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x6, 0x1, 0x92, 0x81, 0x0, 0x1, 0x80001, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x80000001, 0x7}, 0x4000, 0x9d6, 0x3, 0x1, 0x80000001, 0x6, 0x8e, 0x0, 0x1f, 0x0, 0x100000001}, 0x0, 0x1, r4, 0x6) perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x20000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000180)}, 0x10, 0x2, 0x5b4, 0x4, 0x8, 0x3, 0x9, 0x0, 0xffffff3e, 0x0, 0x80000001}, r1, 0x5, r6, 0x0) 05:20:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 36) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2053.243726][T15011] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2053.251539][T15011] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2053.259350][T15011] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2053.267169][T15011] 05:20:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) openat$cgroup_devices(r1, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x16, &(0x7f00000000c0)=@raw=[@generic={0x5, 0xc, 0x9, 0x0, 0x80000001}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @generic={0x7, 0x4, 0x8, 0x1, 0x7fffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xc8}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x9, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x7673c7ed8b5a62a0, '\x00', r3, 0x12, r2, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x8, 0x7, 0xfffffff8}, 0x10, 0xffffffffffffffff, r2, 0x8, 0x0, &(0x7f0000000640)=[{0x1, 0x2, 0x4, 0x9}, {0x5, 0x5, 0x3, 0x8}, {0x5, 0x1, 0x6, 0x3}, {0x4, 0x5, 0x5, 0x8}, {0x1, 0x1, 0x3, 0x1}, {0x5, 0x4, 0xa, 0xb}, {0x4, 0x4, 0x2, 0xa}, {0x4, 0x3, 0x0, 0x2}], 0x10, 0x7fff}, 0x90) [ 2053.296895][T15130] FAULT_INJECTION: forcing a failure. [ 2053.296895][T15130] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.321384][T15130] CPU: 0 PID: 15130 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2053.331538][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2053.341432][T15130] Call Trace: [ 2053.344555][T15130] [ 2053.347332][T15130] dump_stack_lvl+0x151/0x1b7 [ 2053.351846][T15130] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2053.357317][T15130] dump_stack+0x15/0x17 [ 2053.361306][T15130] should_fail+0x3c6/0x510 [ 2053.365559][T15130] __should_failslab+0xa4/0xe0 [ 2053.370157][T15130] ? anon_vma_clone+0x9a/0x500 [ 2053.374761][T15130] should_failslab+0x9/0x20 [ 2053.379104][T15130] slab_pre_alloc_hook+0x37/0xd0 [ 2053.383872][T15130] ? anon_vma_clone+0x9a/0x500 [ 2053.388473][T15130] kmem_cache_alloc+0x44/0x200 [ 2053.393076][T15130] anon_vma_clone+0x9a/0x500 [ 2053.397503][T15130] anon_vma_fork+0x91/0x4e0 [ 2053.401840][T15130] ? anon_vma_name+0x4c/0x70 [ 2053.406269][T15130] ? vm_area_dup+0x17a/0x230 [ 2053.410695][T15130] copy_mm+0xa3a/0x13e0 [ 2053.414690][T15130] ? copy_signal+0x610/0x610 [ 2053.419112][T15130] ? __init_rwsem+0xd6/0x1c0 [ 2053.423540][T15130] ? copy_signal+0x4e3/0x610 [ 2053.427964][T15130] copy_process+0x1149/0x3290 [ 2053.432482][T15130] ? proc_fail_nth_write+0x20b/0x290 [ 2053.437598][T15130] ? fsnotify_perm+0x6a/0x5d0 [ 2053.442113][T15130] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2053.447064][T15130] ? vfs_write+0x9ec/0x1110 [ 2053.451401][T15130] kernel_clone+0x21e/0x9e0 [ 2053.455737][T15130] ? file_end_write+0x1c0/0x1c0 [ 2053.460426][T15130] ? create_io_thread+0x1e0/0x1e0 [ 2053.465287][T15130] ? mutex_unlock+0xb2/0x260 [ 2053.469714][T15130] ? __mutex_lock_slowpath+0x10/0x10 [ 2053.474833][T15130] __x64_sys_clone+0x23f/0x290 [ 2053.479432][T15130] ? __do_sys_vfork+0x130/0x130 [ 2053.484118][T15130] ? ksys_write+0x260/0x2c0 [ 2053.488462][T15130] ? debug_smp_processor_id+0x17/0x20 [ 2053.493665][T15130] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2053.499666][T15130] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2053.505135][T15130] do_syscall_64+0x3d/0xb0 [ 2053.509386][T15130] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2053.515114][T15130] RIP: 0033:0x7f3c5e561da9 [ 2053.519368][T15130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2053.538811][T15130] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) 05:20:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x100002, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7a, 0x40, 0x4, 0x0, 0x0, 0xfffffffffffffff7, 0x90002, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x5, @perf_bp={&(0x7f0000000040)}, 0x16000, 0x9, 0x4, 0x6, 0x3, 0x7067, 0x1, 0x0, 0x100, 0x0, 0x5}, r4, 0x2, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00696f202d637075202d626c6b696f202b637075202b6370752073e9d00f0d32201adb278832bc2148c687d80ef7a51f448e1791718fe95a2bdacd7252bea428954a6a5ed1cc9a97107305c0d101c7d04750bf29d25cb683a63c9db012c75161a1910577a4f681dc9455da282f8d2f58ae6b2f13a6cd94ea2b894e7647925db4dc7b2a725ebe3bcef205b5c0b1738ebdb8ded7a0e324cc2f6ce786b07c9919533fb8728ded78a15cb9ef5a37d565d8046299c4b8d27ee7d2cb9c"], 0x1a) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r6}, 0x8) r7 = syz_clone(0x44000000, &(0x7f0000000040)="bcb73e234d89b94538339d5db3b753fec2042aefdbc6b8514b4f34eda4334b205e2ecc73820d5525ea4f9995ee67b9f19a258169f9ffaf6496b4e8021076003642d8290eb18e04d093b84fb11549903b2cf4da2a0c33a468ce", 0x59, &(0x7f0000000100), &(0x7f0000000140), 0x0) syz_open_procfs$namespace(r7, 0x0) openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r5, 0x0, 0x13, &(0x7f00000001c0)='cgroup.controllers\x00'}, 0x30) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) [ 2053.547055][T15130] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2053.554866][T15130] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2053.562679][T15130] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2053.570489][T15130] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2053.578300][T15130] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2053.586119][T15130] 05:20:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 37) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2053.694897][T15249] FAULT_INJECTION: forcing a failure. [ 2053.694897][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.739058][T15249] CPU: 1 PID: 15249 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2053.749220][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2053.759116][T15249] Call Trace: [ 2053.762239][T15249] [ 2053.765018][T15249] dump_stack_lvl+0x151/0x1b7 [ 2053.769534][T15249] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2053.775010][T15249] dump_stack+0x15/0x17 [ 2053.778989][T15249] should_fail+0x3c6/0x510 [ 2053.783245][T15249] __should_failslab+0xa4/0xe0 [ 2053.787844][T15249] ? vm_area_dup+0x26/0x230 [ 2053.792183][T15249] should_failslab+0x9/0x20 [ 2053.796524][T15249] slab_pre_alloc_hook+0x37/0xd0 [ 2053.801297][T15249] ? vm_area_dup+0x26/0x230 [ 2053.805635][T15249] kmem_cache_alloc+0x44/0x200 [ 2053.810242][T15249] vm_area_dup+0x26/0x230 [ 2053.814401][T15249] copy_mm+0x9a1/0x13e0 [ 2053.818401][T15249] ? copy_signal+0x610/0x610 [ 2053.822821][T15249] ? __init_rwsem+0xd6/0x1c0 [ 2053.827254][T15249] ? copy_signal+0x4e3/0x610 [ 2053.831675][T15249] copy_process+0x1149/0x3290 [ 2053.836194][T15249] ? proc_fail_nth_write+0x20b/0x290 [ 2053.841307][T15249] ? fsnotify_perm+0x6a/0x5d0 [ 2053.845821][T15249] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2053.850770][T15249] ? vfs_write+0x9ec/0x1110 [ 2053.855111][T15249] kernel_clone+0x21e/0x9e0 [ 2053.859447][T15249] ? file_end_write+0x1c0/0x1c0 [ 2053.864138][T15249] ? create_io_thread+0x1e0/0x1e0 [ 2053.868993][T15249] ? mutex_unlock+0xb2/0x260 [ 2053.873424][T15249] ? __mutex_lock_slowpath+0x10/0x10 [ 2053.878544][T15249] __x64_sys_clone+0x23f/0x290 [ 2053.883143][T15249] ? __do_sys_vfork+0x130/0x130 [ 2053.887834][T15249] ? ksys_write+0x260/0x2c0 [ 2053.892180][T15249] ? debug_smp_processor_id+0x17/0x20 [ 2053.897378][T15249] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2053.903280][T15249] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2053.908747][T15249] do_syscall_64+0x3d/0xb0 [ 2053.912998][T15249] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2053.918727][T15249] RIP: 0033:0x7f3c5e561da9 [ 2053.922981][T15249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2053.942423][T15249] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2053.950668][T15249] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2053.958479][T15249] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2053.966290][T15249] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2053.974103][T15249] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2053.981914][T15249] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2053.989731][T15249] 05:20:21 executing program 2: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x100002, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7a, 0x40, 0x4, 0x0, 0x0, 0xfffffffffffffff7, 0x90002, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x5, @perf_bp={&(0x7f0000000040)}, 0x16000, 0x9, 0x4, 0x6, 0x3, 0x7067, 0x1, 0x0, 0x100, 0x0, 0x5}, r4, 0x2, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00696f202d637075202d626c6b696f202b637075202b6370752073e9d00f0d32201adb278832bc2148c687d80ef7a51f448e1791718fe95a2bdacd7252bea428954a6a5ed1cc9a97107305c0d101c7d04750bf29d25cb683a63c9db012c75161a1910577a4f681dc9455da282f8d2f58ae6b2f13a6cd94ea2b894e7647925db4dc7b2a725ebe3bcef205b5c0b1738ebdb8ded7a0e324cc2f6ce786b07c9919533fb8728ded78a15cb9ef5a37d565d8046299c4b8d27ee7d2cb9c"], 0x1a) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r6}, 0x8) r7 = syz_clone(0x44000000, &(0x7f0000000040)="bcb73e234d89b94538339d5db3b753fec2042aefdbc6b8514b4f34eda4334b205e2ecc73820d5525ea4f9995ee67b9f19a258169f9ffaf6496b4e8021076003642d8290eb18e04d093b84fb11549903b2cf4da2a0c33a468ce", 0x59, &(0x7f0000000100), &(0x7f0000000140), 0x0) syz_open_procfs$namespace(r7, 0x0) openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r5, 0x0, 0x13, &(0x7f00000001c0)='cgroup.controllers\x00'}, 0x30) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x100002, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7a, 0x40, 0x4, 0x0, 0x0, 0xfffffffffffffff7, 0x90002, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x5, @perf_bp={&(0x7f0000000040)}, 0x16000, 0x9, 0x4, 0x6, 0x3, 0x7067, 0x1, 0x0, 0x100, 0x0, 0x5}, r4, 0x2, 0xffffffffffffffff, 0x8) (async) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00696f202d637075202d626c6b696f202b637075202b6370752073e9d00f0d32201adb278832bc2148c687d80ef7a51f448e1791718fe95a2bdacd7252bea428954a6a5ed1cc9a97107305c0d101c7d04750bf29d25cb683a63c9db012c75161a1910577a4f681dc9455da282f8d2f58ae6b2f13a6cd94ea2b894e7647925db4dc7b2a725ebe3bcef205b5c0b1738ebdb8ded7a0e324cc2f6ce786b07c9919533fb8728ded78a15cb9ef5a37d565d8046299c4b8d27ee7d2cb9c"], 0x1a) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r6}, 0x8) (async) syz_clone(0x44000000, &(0x7f0000000040)="bcb73e234d89b94538339d5db3b753fec2042aefdbc6b8514b4f34eda4334b205e2ecc73820d5525ea4f9995ee67b9f19a258169f9ffaf6496b4e8021076003642d8290eb18e04d093b84fb11549903b2cf4da2a0c33a468ce", 0x59, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async) syz_open_procfs$namespace(r7, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r5, 0x0, 0x13, &(0x7f00000001c0)='cgroup.controllers\x00'}, 0x30) (async) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) (async) 05:20:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) 05:20:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 38) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:21 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2054.129317][T15265] FAULT_INJECTION: forcing a failure. [ 2054.129317][T15265] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.149970][T15265] CPU: 1 PID: 15265 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2054.160136][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2054.170031][T15265] Call Trace: [ 2054.173153][T15265] [ 2054.175930][T15265] dump_stack_lvl+0x151/0x1b7 [ 2054.180449][T15265] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2054.185917][T15265] dump_stack+0x15/0x17 [ 2054.189906][T15265] should_fail+0x3c6/0x510 [ 2054.194215][T15265] __should_failslab+0xa4/0xe0 [ 2054.198756][T15265] ? vm_area_dup+0x26/0x230 [ 2054.203098][T15265] should_failslab+0x9/0x20 [ 2054.207443][T15265] slab_pre_alloc_hook+0x37/0xd0 [ 2054.212211][T15265] ? vm_area_dup+0x26/0x230 [ 2054.216549][T15265] kmem_cache_alloc+0x44/0x200 [ 2054.221150][T15265] vm_area_dup+0x26/0x230 [ 2054.225320][T15265] copy_mm+0x9a1/0x13e0 05:20:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) [ 2054.229312][T15265] ? copy_signal+0x610/0x610 [ 2054.233736][T15265] ? __init_rwsem+0xd6/0x1c0 [ 2054.238162][T15265] ? copy_signal+0x4e3/0x610 [ 2054.242590][T15265] copy_process+0x1149/0x3290 [ 2054.247104][T15265] ? proc_fail_nth_write+0x20b/0x290 [ 2054.252222][T15265] ? fsnotify_perm+0x6a/0x5d0 [ 2054.256735][T15265] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2054.261682][T15265] ? vfs_write+0x9ec/0x1110 [ 2054.266031][T15265] kernel_clone+0x21e/0x9e0 [ 2054.270364][T15265] ? file_end_write+0x1c0/0x1c0 [ 2054.275050][T15265] ? create_io_thread+0x1e0/0x1e0 [ 2054.279906][T15265] ? mutex_unlock+0xb2/0x260 [ 2054.284338][T15265] ? __mutex_lock_slowpath+0x10/0x10 [ 2054.289460][T15265] __x64_sys_clone+0x23f/0x290 [ 2054.294058][T15265] ? __do_sys_vfork+0x130/0x130 [ 2054.298743][T15265] ? ksys_write+0x260/0x2c0 [ 2054.303085][T15265] ? debug_smp_processor_id+0x17/0x20 [ 2054.308290][T15265] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2054.314202][T15265] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2054.319662][T15265] do_syscall_64+0x3d/0xb0 [ 2054.323915][T15265] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2054.329642][T15265] RIP: 0033:0x7f3c5e561da9 [ 2054.333896][T15265] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2054.353340][T15265] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2054.361581][T15265] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2054.369403][T15265] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 39) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2054.377209][T15265] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2054.385016][T15265] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2054.392828][T15265] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2054.400647][T15265] [ 2054.447416][T15383] FAULT_INJECTION: forcing a failure. [ 2054.447416][T15383] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.460644][T15383] CPU: 1 PID: 15383 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2054.470789][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2054.480685][T15383] Call Trace: [ 2054.483806][T15383] [ 2054.486585][T15383] dump_stack_lvl+0x151/0x1b7 [ 2054.491100][T15383] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2054.496569][T15383] ? avc_denied+0x1b0/0x1b0 [ 2054.500908][T15383] dump_stack+0x15/0x17 [ 2054.504899][T15383] should_fail+0x3c6/0x510 [ 2054.509156][T15383] __should_failslab+0xa4/0xe0 [ 2054.513755][T15383] ? vm_area_dup+0x26/0x230 [ 2054.518091][T15383] should_failslab+0x9/0x20 [ 2054.522436][T15383] slab_pre_alloc_hook+0x37/0xd0 [ 2054.527205][T15383] ? vm_area_dup+0x26/0x230 [ 2054.531543][T15383] kmem_cache_alloc+0x44/0x200 [ 2054.536146][T15383] vm_area_dup+0x26/0x230 [ 2054.540314][T15383] copy_mm+0x9a1/0x13e0 [ 2054.544308][T15383] ? copy_signal+0x610/0x610 [ 2054.548728][T15383] ? __init_rwsem+0xd6/0x1c0 [ 2054.553155][T15383] ? copy_signal+0x4e3/0x610 [ 2054.557585][T15383] copy_process+0x1149/0x3290 [ 2054.562098][T15383] ? proc_fail_nth_write+0x20b/0x290 [ 2054.567219][T15383] ? fsnotify_perm+0x6a/0x5d0 [ 2054.571731][T15383] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2054.576677][T15383] ? vfs_write+0x9ec/0x1110 [ 2054.581020][T15383] kernel_clone+0x21e/0x9e0 [ 2054.585354][T15383] ? file_end_write+0x1c0/0x1c0 [ 2054.590046][T15383] ? create_io_thread+0x1e0/0x1e0 [ 2054.594906][T15383] ? mutex_unlock+0xb2/0x260 [ 2054.599334][T15383] ? __mutex_lock_slowpath+0x10/0x10 [ 2054.604455][T15383] __x64_sys_clone+0x23f/0x290 [ 2054.609053][T15383] ? __do_sys_vfork+0x130/0x130 [ 2054.613739][T15383] ? ksys_write+0x260/0x2c0 [ 2054.618084][T15383] ? debug_smp_processor_id+0x17/0x20 [ 2054.623288][T15383] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2054.629191][T15383] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2054.634660][T15383] do_syscall_64+0x3d/0xb0 [ 2054.638999][T15383] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2054.644725][T15383] RIP: 0033:0x7f3c5e561da9 [ 2054.648976][T15383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2054.668424][T15383] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2054.676665][T15383] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2054.684479][T15383] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 40) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2054.692287][T15383] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2054.700097][T15383] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2054.707906][T15383] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2054.715725][T15383] [ 2054.761341][T15504] FAULT_INJECTION: forcing a failure. [ 2054.761341][T15504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2054.811022][T15504] CPU: 1 PID: 15504 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2054.821183][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2054.831081][T15504] Call Trace: [ 2054.834202][T15504] [ 2054.836979][T15504] dump_stack_lvl+0x151/0x1b7 [ 2054.841495][T15504] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2054.846964][T15504] dump_stack+0x15/0x17 [ 2054.850953][T15504] should_fail+0x3c6/0x510 [ 2054.855208][T15504] should_fail_alloc_page+0x5a/0x80 [ 2054.860242][T15504] prepare_alloc_pages+0x15c/0x700 [ 2054.865193][T15504] ? __alloc_pages_bulk+0xe40/0xe40 [ 2054.870226][T15504] __alloc_pages+0x18c/0x8f0 [ 2054.874650][T15504] ? prep_new_page+0x110/0x110 [ 2054.879246][T15504] ? __alloc_pages+0x27e/0x8f0 [ 2054.883849][T15504] ? __kasan_check_write+0x14/0x20 [ 2054.888794][T15504] ? _raw_spin_lock+0xa4/0x1b0 [ 2054.893397][T15504] __pmd_alloc+0xb1/0x550 [ 2054.897562][T15504] ? __pud_alloc+0x260/0x260 [ 2054.901987][T15504] ? __pud_alloc+0x213/0x260 [ 2054.906415][T15504] ? do_handle_mm_fault+0x2330/0x2330 [ 2054.911623][T15504] ? __stack_depot_save+0x34/0x470 [ 2054.916566][T15504] ? anon_vma_clone+0x9a/0x500 [ 2054.921170][T15504] copy_page_range+0x2b3d/0x2f90 [ 2054.925940][T15504] ? __kasan_slab_alloc+0xb1/0xe0 [ 2054.930801][T15504] ? slab_post_alloc_hook+0x53/0x2c0 [ 2054.935924][T15504] ? copy_mm+0xa3a/0x13e0 [ 2054.940093][T15504] ? copy_process+0x1149/0x3290 [ 2054.944778][T15504] ? kernel_clone+0x21e/0x9e0 [ 2054.949376][T15504] ? do_syscall_64+0x3d/0xb0 [ 2054.953803][T15504] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2054.959717][T15504] ? pfn_valid+0x1e0/0x1e0 [ 2054.963958][T15504] ? rwsem_write_trylock+0x15b/0x290 [ 2054.969093][T15504] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2054.975331][T15504] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2054.980890][T15504] ? __rb_insert_augmented+0x5de/0x610 [ 2054.986189][T15504] copy_mm+0xc7e/0x13e0 [ 2054.990179][T15504] ? copy_signal+0x610/0x610 [ 2054.994600][T15504] ? __init_rwsem+0xd6/0x1c0 [ 2054.999114][T15504] ? copy_signal+0x4e3/0x610 [ 2055.003542][T15504] copy_process+0x1149/0x3290 [ 2055.008051][T15504] ? proc_fail_nth_write+0x20b/0x290 [ 2055.013169][T15504] ? fsnotify_perm+0x6a/0x5d0 [ 2055.017684][T15504] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2055.022632][T15504] ? vfs_write+0x9ec/0x1110 [ 2055.026973][T15504] kernel_clone+0x21e/0x9e0 [ 2055.031308][T15504] ? file_end_write+0x1c0/0x1c0 [ 2055.035997][T15504] ? create_io_thread+0x1e0/0x1e0 [ 2055.040856][T15504] ? mutex_unlock+0xb2/0x260 [ 2055.045283][T15504] ? __mutex_lock_slowpath+0x10/0x10 [ 2055.050407][T15504] __x64_sys_clone+0x23f/0x290 [ 2055.055005][T15504] ? __do_sys_vfork+0x130/0x130 [ 2055.059689][T15504] ? ksys_write+0x260/0x2c0 [ 2055.064035][T15504] ? debug_smp_processor_id+0x17/0x20 [ 2055.069238][T15504] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2055.075144][T15504] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2055.080610][T15504] do_syscall_64+0x3d/0xb0 [ 2055.084862][T15504] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2055.090589][T15504] RIP: 0033:0x7f3c5e561da9 [ 2055.094854][T15504] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2055.114285][T15504] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2055.122530][T15504] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2055.130342][T15504] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2055.138155][T15504] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2055.145968][T15504] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2055.153777][T15504] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 05:20:22 executing program 2: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2055.161594][T15504] 05:20:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x100002, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7a, 0x40, 0x4, 0x0, 0x0, 0xfffffffffffffff7, 0x90002, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x5, @perf_bp={&(0x7f0000000040)}, 0x16000, 0x9, 0x4, 0x6, 0x3, 0x7067, 0x1, 0x0, 0x100, 0x0, 0x5}, r4, 0x2, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00696f202d637075202d626c6b696f202b637075202b6370752073e9d00f0d32201adb278832bc2148c687d80ef7a51f448e1791718fe95a2bdacd7252bea428954a6a5ed1cc9a97107305c0d101c7d04750bf29d25cb683a63c9db012c75161a1910577a4f681dc9455da282f8d2f58ae6b2f13a6cd94ea2b894e7647925db4dc7b2a725ebe3bcef205b5c0b1738ebdb8ded7a0e324cc2f6ce786b07c9919533fb8728ded78a15cb9ef5a37d565d8046299c4b8d27ee7d2cb9c"], 0x1a) (async) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00696f202d637075202d626c6b696f202b637075202b6370752073e9d00f0d32201adb278832bc2148c687d80ef7a51f448e1791718fe95a2bdacd7252bea428954a6a5ed1cc9a97107305c0d101c7d04750bf29d25cb683a63c9db012c75161a1910577a4f681dc9455da282f8d2f58ae6b2f13a6cd94ea2b894e7647925db4dc7b2a725ebe3bcef205b5c0b1738ebdb8ded7a0e324cc2f6ce786b07c9919533fb8728ded78a15cb9ef5a37d565d8046299c4b8d27ee7d2cb9c"], 0x1a) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r6}, 0x8) r7 = syz_clone(0x44000000, &(0x7f0000000040)="bcb73e234d89b94538339d5db3b753fec2042aefdbc6b8514b4f34eda4334b205e2ecc73820d5525ea4f9995ee67b9f19a258169f9ffaf6496b4e8021076003642d8290eb18e04d093b84fb11549903b2cf4da2a0c33a468ce", 0x59, &(0x7f0000000100), &(0x7f0000000140), 0x0) syz_open_procfs$namespace(r7, 0x0) openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r5, 0x0, 0x13, &(0x7f00000001c0)='cgroup.controllers\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r5, 0x0, 0x13, &(0x7f00000001c0)='cgroup.controllers\x00'}, 0x30) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) 05:20:22 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 41) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2055.358974][T15519] FAULT_INJECTION: forcing a failure. [ 2055.358974][T15519] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.374508][T15519] CPU: 0 PID: 15519 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2055.384663][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2055.394556][T15519] Call Trace: [ 2055.397678][T15519] [ 2055.400456][T15519] dump_stack_lvl+0x151/0x1b7 [ 2055.404970][T15519] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2055.410440][T15519] dump_stack+0x15/0x17 [ 2055.414431][T15519] should_fail+0x3c6/0x510 [ 2055.418685][T15519] __should_failslab+0xa4/0xe0 [ 2055.423287][T15519] ? anon_vma_clone+0x9a/0x500 [ 2055.427888][T15519] should_failslab+0x9/0x20 [ 2055.432226][T15519] slab_pre_alloc_hook+0x37/0xd0 [ 2055.437003][T15519] ? anon_vma_clone+0x9a/0x500 [ 2055.441595][T15519] kmem_cache_alloc+0x44/0x200 [ 2055.446200][T15519] anon_vma_clone+0x9a/0x500 [ 2055.450626][T15519] anon_vma_fork+0x91/0x4e0 [ 2055.454963][T15519] ? anon_vma_name+0x4c/0x70 [ 2055.459391][T15519] ? vm_area_dup+0x17a/0x230 [ 2055.463818][T15519] copy_mm+0xa3a/0x13e0 [ 2055.467816][T15519] ? copy_signal+0x610/0x610 [ 2055.472237][T15519] ? __init_rwsem+0xd6/0x1c0 [ 2055.476663][T15519] ? copy_signal+0x4e3/0x610 [ 2055.481089][T15519] copy_process+0x1149/0x3290 [ 2055.485603][T15519] ? proc_fail_nth_write+0x20b/0x290 [ 2055.490724][T15519] ? fsnotify_perm+0x6a/0x5d0 [ 2055.495239][T15519] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2055.500185][T15519] ? vfs_write+0x9ec/0x1110 [ 2055.504524][T15519] kernel_clone+0x21e/0x9e0 [ 2055.508860][T15519] ? file_end_write+0x1c0/0x1c0 [ 2055.513551][T15519] ? create_io_thread+0x1e0/0x1e0 [ 2055.518412][T15519] ? mutex_unlock+0xb2/0x260 [ 2055.522835][T15519] ? __mutex_lock_slowpath+0x10/0x10 [ 2055.527967][T15519] __x64_sys_clone+0x23f/0x290 [ 2055.532644][T15519] ? __do_sys_vfork+0x130/0x130 [ 2055.537423][T15519] ? ksys_write+0x260/0x2c0 [ 2055.541760][T15519] ? debug_smp_processor_id+0x17/0x20 [ 2055.546962][T15519] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2055.552866][T15519] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2055.558343][T15519] do_syscall_64+0x3d/0xb0 [ 2055.562597][T15519] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2055.568316][T15519] RIP: 0033:0x7f3c5e561da9 [ 2055.572568][T15519] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2055.592010][T15519] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2055.600258][T15519] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2055.608068][T15519] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2055.615877][T15519] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2055.623688][T15519] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2055.631500][T15519] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2055.639316][T15519] 05:20:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'cpuset'}, {0x2d, 'io'}]}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a) 05:20:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 42) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2055.805310][T15529] FAULT_INJECTION: forcing a failure. [ 2055.805310][T15529] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.873578][T15529] CPU: 0 PID: 15529 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2055.883739][T15529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2055.893634][T15529] Call Trace: [ 2055.896758][T15529] [ 2055.899533][T15529] dump_stack_lvl+0x151/0x1b7 [ 2055.904047][T15529] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2055.909518][T15529] dump_stack+0x15/0x17 [ 2055.913511][T15529] should_fail+0x3c6/0x510 [ 2055.917764][T15529] __should_failslab+0xa4/0xe0 [ 2055.922361][T15529] ? vm_area_dup+0x26/0x230 [ 2055.927053][T15529] should_failslab+0x9/0x20 [ 2055.931390][T15529] slab_pre_alloc_hook+0x37/0xd0 [ 2055.936164][T15529] ? vm_area_dup+0x26/0x230 [ 2055.940500][T15529] kmem_cache_alloc+0x44/0x200 [ 2055.945103][T15529] vm_area_dup+0x26/0x230 [ 2055.949268][T15529] copy_mm+0x9a1/0x13e0 [ 2055.953263][T15529] ? copy_signal+0x610/0x610 [ 2055.957685][T15529] ? __init_rwsem+0xd6/0x1c0 [ 2055.962135][T15529] ? copy_signal+0x4e3/0x610 [ 2055.966540][T15529] copy_process+0x1149/0x3290 [ 2055.971055][T15529] ? proc_fail_nth_write+0x20b/0x290 [ 2055.976175][T15529] ? fsnotify_perm+0x6a/0x5d0 [ 2055.980776][T15529] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2055.985719][T15529] ? vfs_write+0x9ec/0x1110 [ 2055.990062][T15529] kernel_clone+0x21e/0x9e0 [ 2055.994400][T15529] ? file_end_write+0x1c0/0x1c0 [ 2055.999088][T15529] ? create_io_thread+0x1e0/0x1e0 [ 2056.003946][T15529] ? mutex_unlock+0xb2/0x260 [ 2056.008375][T15529] ? __mutex_lock_slowpath+0x10/0x10 [ 2056.013498][T15529] __x64_sys_clone+0x23f/0x290 [ 2056.018100][T15529] ? __do_sys_vfork+0x130/0x130 05:20:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'cpuset'}, {0x2d, 'io'}]}, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="dc436f202d637075202d626c6b696f202b6370752033637075208f40fbb68d241e4181d560fb79e60e999b5240d9e0c27fed18856c4520b01a9c83ce6a039a609fc3b1907e1351f38c12bce9c9fbaf91d9fb12600ff8b2b10a0e68aa3a5f0fe2e5b394721d49da5ad1dc4da9fa4990d931c25d889c420745dab28f1b953929ec0cd4b07b5adb4502f918a9084739d4adb4e5d26aae6d948706fec15c49ec762d69246296db5c84a894907cc5e3b1c68c817068abb755c679fa53f0d821ada8074fe75ba79c114347a4b61c58d045cb635ec5d727004ecb3f7cc649f5c170d4c4149a5e15172e4258a8a8fbcddfce8ec224ec6ae6d98b1778c236f021138f4c188b8dae487e4c140b0317ca74eb2c1f5de5a2e506da2281a2c5ae3d47a1027b700944b2db492ac076d143d655c0e95b4db255ea4dedecb8a7986bf0a1ac92781fe8f8d2f5bdb806a69ff1e922576604f3fdec295999f2d7"], 0x1a) [ 2056.022779][T15529] ? ksys_write+0x260/0x2c0 [ 2056.027126][T15529] ? debug_smp_processor_id+0x17/0x20 [ 2056.032329][T15529] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2056.038231][T15529] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2056.043703][T15529] do_syscall_64+0x3d/0xb0 [ 2056.047953][T15529] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2056.053682][T15529] RIP: 0033:0x7f3c5e561da9 [ 2056.057932][T15529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2056.077374][T15529] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2056.085620][T15529] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2056.093430][T15529] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2056.101245][T15529] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2056.109053][T15529] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2056.116866][T15529] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 05:20:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="184d0908501785000400"/46], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}, 0x0, 0x4}, 0x0, 0xfffefeffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x8}, r1, 0xa, 0xffffffffffffffff, 0x0) getpid() r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0x0, 0x1, 0x2c12, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x1}, 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x4, 0x4, 0x8, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x80, 0x1f, 0x7, 0x0, 0x0, 0x100, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x1}, 0x1002, 0x8, 0x0, 0x0, 0xfffffffffffc0000, 0x0, 0x0, 0x0, 0x5}, r1, 0xa, r2, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff0100000000000001010000175600000000e1d2ba75aa0517469d7f0b481a6a1a00009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x200, 0xb4, &(0x7f0000000a80)=""/180, 0x403e6dd0f9c515f7, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x400, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3], 0x0, 0x10, 0x80000000}, 0x90) perf_event_open(0x0, 0x0, 0xf, r4, 0x0) socketpair(0xf, 0x2, 0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3, 0xfd, 0x3, 0x1, 0x0, 0x9, 0x20, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x3ff, 0x7}, 0x8c8, 0x0, 0xf, 0x7, 0x5, 0x7, 0x9, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4004662b, &(0x7f00000005c0)=0x1) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) 05:20:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 43) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2056.124686][T15529] 05:20:23 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2056.184123][T15539] FAULT_INJECTION: forcing a failure. [ 2056.184123][T15539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2056.204699][T15539] CPU: 0 PID: 15539 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2056.214852][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2056.224747][T15539] Call Trace: [ 2056.227876][T15539] [ 2056.230653][T15539] dump_stack_lvl+0x151/0x1b7 [ 2056.235166][T15539] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2056.240638][T15539] dump_stack+0x15/0x17 [ 2056.244624][T15539] should_fail+0x3c6/0x510 [ 2056.248878][T15539] should_fail_alloc_page+0x5a/0x80 [ 2056.253906][T15539] prepare_alloc_pages+0x15c/0x700 [ 2056.258853][T15539] ? __alloc_pages+0x8f0/0x8f0 [ 2056.263454][T15539] ? __alloc_pages_bulk+0xe40/0xe40 [ 2056.268491][T15539] __alloc_pages+0x18c/0x8f0 [ 2056.272913][T15539] ? prep_new_page+0x110/0x110 [ 2056.277519][T15539] ? 0xffffffffa00022ac [ 2056.281508][T15539] ? is_bpf_text_address+0x172/0x190 [ 2056.286630][T15539] pte_alloc_one+0x73/0x1b0 [ 2056.290969][T15539] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2056.296002][T15539] ? arch_stack_walk+0xf3/0x140 [ 2056.300688][T15539] __pte_alloc+0x86/0x350 [ 2056.304855][T15539] ? free_pgtables+0x280/0x280 [ 2056.309455][T15539] ? _raw_spin_lock+0xa4/0x1b0 [ 2056.314055][T15539] ? __kasan_check_write+0x14/0x20 [ 2056.319005][T15539] copy_page_range+0x28a8/0x2f90 [ 2056.323777][T15539] ? __kasan_slab_alloc+0xb1/0xe0 [ 2056.328644][T15539] ? pfn_valid+0x1e0/0x1e0 [ 2056.332888][T15539] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2056.338445][T15539] ? __rb_insert_augmented+0x5de/0x610 [ 2056.343741][T15539] copy_mm+0xc7e/0x13e0 [ 2056.347737][T15539] ? copy_signal+0x610/0x610 [ 2056.352157][T15539] ? __init_rwsem+0xd6/0x1c0 [ 2056.356582][T15539] ? copy_signal+0x4e3/0x610 [ 2056.361010][T15539] copy_process+0x1149/0x3290 [ 2056.365698][T15539] ? proc_fail_nth_write+0x20b/0x290 [ 2056.370820][T15539] ? fsnotify_perm+0x6a/0x5d0 [ 2056.375331][T15539] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2056.380280][T15539] ? vfs_write+0x9ec/0x1110 [ 2056.384618][T15539] kernel_clone+0x21e/0x9e0 [ 2056.388957][T15539] ? file_end_write+0x1c0/0x1c0 [ 2056.393643][T15539] ? create_io_thread+0x1e0/0x1e0 [ 2056.398504][T15539] ? mutex_unlock+0xb2/0x260 [ 2056.402932][T15539] ? __mutex_lock_slowpath+0x10/0x10 [ 2056.408068][T15539] __x64_sys_clone+0x23f/0x290 [ 2056.412761][T15539] ? __do_sys_vfork+0x130/0x130 [ 2056.417439][T15539] ? ksys_write+0x260/0x2c0 [ 2056.421787][T15539] ? debug_smp_processor_id+0x17/0x20 [ 2056.427073][T15539] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2056.432973][T15539] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2056.438445][T15539] do_syscall_64+0x3d/0xb0 [ 2056.442694][T15539] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2056.448424][T15539] RIP: 0033:0x7f3c5e561da9 [ 2056.452677][T15539] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2056.472118][T15539] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'cpuset'}, {0x2d, 'io'}]}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'cpuset'}, {0x2d, 'io'}]}, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a) (async) [ 2056.480362][T15539] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2056.488261][T15539] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2056.496071][T15539] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2056.503982][T15539] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2056.511783][T15539] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2056.519598][T15539] 05:20:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 44) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2056.809282][T15550] FAULT_INJECTION: forcing a failure. [ 2056.809282][T15550] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.842457][T15550] CPU: 0 PID: 15550 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2056.852619][T15550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2056.862519][T15550] Call Trace: [ 2056.865638][T15550] [ 2056.868416][T15550] dump_stack_lvl+0x151/0x1b7 [ 2056.872930][T15550] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2056.878401][T15550] dump_stack+0x15/0x17 [ 2056.882392][T15550] should_fail+0x3c6/0x510 [ 2056.886658][T15550] __should_failslab+0xa4/0xe0 [ 2056.891242][T15550] ? anon_vma_fork+0x1df/0x4e0 [ 2056.895844][T15550] should_failslab+0x9/0x20 [ 2056.900184][T15550] slab_pre_alloc_hook+0x37/0xd0 [ 2056.904957][T15550] ? anon_vma_fork+0x1df/0x4e0 [ 2056.909555][T15550] kmem_cache_alloc+0x44/0x200 [ 2056.914156][T15550] anon_vma_fork+0x1df/0x4e0 [ 2056.918585][T15550] copy_mm+0xa3a/0x13e0 [ 2056.922579][T15550] ? copy_signal+0x610/0x610 [ 2056.926999][T15550] ? __init_rwsem+0xd6/0x1c0 [ 2056.931429][T15550] ? copy_signal+0x4e3/0x610 [ 2056.935854][T15550] copy_process+0x1149/0x3290 [ 2056.940365][T15550] ? proc_fail_nth_write+0x20b/0x290 [ 2056.945497][T15550] ? fsnotify_perm+0x6a/0x5d0 [ 2056.950007][T15550] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2056.954948][T15550] ? vfs_write+0x9ec/0x1110 [ 2056.959292][T15550] kernel_clone+0x21e/0x9e0 [ 2056.963629][T15550] ? file_end_write+0x1c0/0x1c0 [ 2056.968319][T15550] ? create_io_thread+0x1e0/0x1e0 [ 2056.973192][T15550] ? mutex_unlock+0xb2/0x260 [ 2056.977603][T15550] ? __mutex_lock_slowpath+0x10/0x10 [ 2056.982725][T15550] __x64_sys_clone+0x23f/0x290 [ 2056.987335][T15550] ? __do_sys_vfork+0x130/0x130 [ 2056.992008][T15550] ? ksys_write+0x260/0x2c0 [ 2056.996354][T15550] ? debug_smp_processor_id+0x17/0x20 [ 2057.001558][T15550] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2057.007463][T15550] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2057.012932][T15550] do_syscall_64+0x3d/0xb0 [ 2057.017182][T15550] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2057.022910][T15550] RIP: 0033:0x7f3c5e561da9 [ 2057.027162][T15550] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2057.046604][T15550] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="184d0908501785000400"/46], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="184d0908501785000400"/46], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}, 0x0, 0x4}, 0x0, 0xfffefeffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() (async) r1 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x8}, r1, 0xa, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x8}, r1, 0xa, 0xffffffffffffffff, 0x0) getpid() r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0x0, 0x1, 0x2c12, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x1}, 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x4, 0x4, 0x8, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x4, 0x4, 0x8, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x80, 0x1f, 0x7, 0x0, 0x0, 0x100, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x1}, 0x1002, 0x8, 0x0, 0x0, 0xfffffffffffc0000, 0x0, 0x0, 0x0, 0x5}, r1, 0xa, r2, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff0100000000000001010000175600000000e1d2ba75aa0517469d7f0b481a6a1a00009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x200, 0xb4, &(0x7f0000000a80)=""/180, 0x403e6dd0f9c515f7, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x400, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3], 0x0, 0x10, 0x80000000}, 0x90) perf_event_open(0x0, 0x0, 0xf, r4, 0x0) socketpair(0xf, 0x2, 0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3, 0xfd, 0x3, 0x1, 0x0, 0x9, 0x20, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x3ff, 0x7}, 0x8c8, 0x0, 0xf, 0x7, 0x5, 0x7, 0x9, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4004662b, &(0x7f00000005c0)=0x1) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2057.054858][T15550] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2057.062666][T15550] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2057.070475][T15550] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2057.078281][T15550] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2057.086088][T15550] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2057.093905][T15550] 05:20:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000003100)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x1a) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) 05:20:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) 05:20:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 45) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000003100)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x1a) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) (async) sendmsg$unix(r3, &(0x7f0000003100)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x80) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x1a) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) (async) 05:20:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) 05:20:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000003100)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x1a) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) [ 2057.285560][T15781] FAULT_INJECTION: forcing a failure. [ 2057.285560][T15781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2057.356737][T15781] CPU: 1 PID: 15781 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2057.366901][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2057.376799][T15781] Call Trace: [ 2057.379921][T15781] [ 2057.382702][T15781] dump_stack_lvl+0x151/0x1b7 [ 2057.387211][T15781] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2057.392684][T15781] dump_stack+0x15/0x17 [ 2057.396669][T15781] should_fail+0x3c6/0x510 [ 2057.400931][T15781] should_fail_alloc_page+0x5a/0x80 [ 2057.405959][T15781] prepare_alloc_pages+0x15c/0x700 [ 2057.410903][T15781] ? __alloc_pages+0x8f0/0x8f0 [ 2057.415508][T15781] ? __alloc_pages_bulk+0xe40/0xe40 [ 2057.420541][T15781] __alloc_pages+0x18c/0x8f0 [ 2057.424966][T15781] ? prep_new_page+0x110/0x110 [ 2057.429568][T15781] ? 0xffffffffa00022ac [ 2057.433563][T15781] ? is_bpf_text_address+0x172/0x190 [ 2057.438682][T15781] pte_alloc_one+0x73/0x1b0 [ 2057.443019][T15781] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2057.448053][T15781] ? arch_stack_walk+0xf3/0x140 [ 2057.452739][T15781] __pte_alloc+0x86/0x350 [ 2057.456926][T15781] ? free_pgtables+0x280/0x280 [ 2057.461505][T15781] ? _raw_spin_lock+0xa4/0x1b0 [ 2057.466104][T15781] ? __kasan_check_write+0x14/0x20 [ 2057.471056][T15781] copy_page_range+0x28a8/0x2f90 [ 2057.475830][T15781] ? __kasan_slab_alloc+0xb1/0xe0 [ 2057.480698][T15781] ? pfn_valid+0x1e0/0x1e0 [ 2057.484941][T15781] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2057.490493][T15781] ? __rb_insert_augmented+0x5de/0x610 [ 2057.495793][T15781] copy_mm+0xc7e/0x13e0 [ 2057.499786][T15781] ? copy_signal+0x610/0x610 [ 2057.504208][T15781] ? __init_rwsem+0xd6/0x1c0 [ 2057.508633][T15781] ? copy_signal+0x4e3/0x610 [ 2057.513066][T15781] copy_process+0x1149/0x3290 [ 2057.517578][T15781] ? proc_fail_nth_write+0x20b/0x290 [ 2057.522695][T15781] ? fsnotify_perm+0x6a/0x5d0 [ 2057.527208][T15781] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2057.532159][T15781] ? vfs_write+0x9ec/0x1110 [ 2057.536496][T15781] kernel_clone+0x21e/0x9e0 [ 2057.540836][T15781] ? file_end_write+0x1c0/0x1c0 [ 2057.545523][T15781] ? create_io_thread+0x1e0/0x1e0 [ 2057.550380][T15781] ? mutex_unlock+0xb2/0x260 [ 2057.554807][T15781] ? __mutex_lock_slowpath+0x10/0x10 [ 2057.560055][T15781] __x64_sys_clone+0x23f/0x290 [ 2057.564618][T15781] ? __do_sys_vfork+0x130/0x130 [ 2057.569301][T15781] ? ksys_write+0x260/0x2c0 [ 2057.573654][T15781] ? debug_smp_processor_id+0x17/0x20 [ 2057.578847][T15781] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2057.584756][T15781] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2057.590220][T15781] do_syscall_64+0x3d/0xb0 [ 2057.594474][T15781] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2057.600199][T15781] RIP: 0033:0x7f3c5e561da9 [ 2057.604453][T15781] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2057.623898][T15781] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2057.632142][T15781] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2057.639950][T15781] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2057.647763][T15781] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:25 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) (async) 05:20:25 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 46) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2057.655576][T15781] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2057.663386][T15781] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2057.671205][T15781] [ 2057.744267][T15903] FAULT_INJECTION: forcing a failure. [ 2057.744267][T15903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2057.774894][T15903] CPU: 0 PID: 15903 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2057.785052][T15903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2057.794952][T15903] Call Trace: [ 2057.798073][T15903] [ 2057.800854][T15903] dump_stack_lvl+0x151/0x1b7 [ 2057.805363][T15903] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2057.810836][T15903] dump_stack+0x15/0x17 [ 2057.814823][T15903] should_fail+0x3c6/0x510 [ 2057.819079][T15903] should_fail_alloc_page+0x5a/0x80 [ 2057.824110][T15903] prepare_alloc_pages+0x15c/0x700 [ 2057.829060][T15903] ? __alloc_pages_bulk+0xe40/0xe40 [ 2057.834093][T15903] __alloc_pages+0x18c/0x8f0 [ 2057.838517][T15903] ? prep_new_page+0x110/0x110 [ 2057.843117][T15903] ? __alloc_pages+0x27e/0x8f0 [ 2057.847728][T15903] ? __kasan_check_write+0x14/0x20 [ 2057.852665][T15903] ? _raw_spin_lock+0xa4/0x1b0 [ 2057.857264][T15903] __pmd_alloc+0xb1/0x550 [ 2057.861433][T15903] ? __pud_alloc+0x260/0x260 [ 2057.865854][T15903] ? __pud_alloc+0x213/0x260 [ 2057.870287][T15903] ? do_handle_mm_fault+0x2330/0x2330 [ 2057.875490][T15903] ? __stack_depot_save+0x34/0x470 [ 2057.880447][T15903] ? anon_vma_clone+0x9a/0x500 [ 2057.885045][T15903] copy_page_range+0x2b3d/0x2f90 [ 2057.889812][T15903] ? __kasan_slab_alloc+0xb1/0xe0 [ 2057.894674][T15903] ? slab_post_alloc_hook+0x53/0x2c0 [ 2057.899798][T15903] ? copy_mm+0xa3a/0x13e0 [ 2057.903958][T15903] ? copy_process+0x1149/0x3290 [ 2057.908731][T15903] ? kernel_clone+0x21e/0x9e0 [ 2057.913251][T15903] ? do_syscall_64+0x3d/0xb0 [ 2057.917672][T15903] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2057.923584][T15903] ? pfn_valid+0x1e0/0x1e0 [ 2057.927829][T15903] ? rwsem_write_trylock+0x15b/0x290 [ 2057.932950][T15903] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2057.939198][T15903] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2057.944761][T15903] ? __rb_insert_augmented+0x5de/0x610 [ 2057.950053][T15903] copy_mm+0xc7e/0x13e0 [ 2057.954047][T15903] ? copy_signal+0x610/0x610 [ 2057.958467][T15903] ? __init_rwsem+0xd6/0x1c0 [ 2057.962894][T15903] ? copy_signal+0x4e3/0x610 [ 2057.967320][T15903] copy_process+0x1149/0x3290 [ 2057.971837][T15903] ? proc_fail_nth_write+0x20b/0x290 [ 2057.976954][T15903] ? fsnotify_perm+0x6a/0x5d0 [ 2057.981468][T15903] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2057.986414][T15903] ? vfs_write+0x9ec/0x1110 [ 2057.990772][T15903] kernel_clone+0x21e/0x9e0 [ 2057.995093][T15903] ? file_end_write+0x1c0/0x1c0 [ 2057.999783][T15903] ? create_io_thread+0x1e0/0x1e0 [ 2058.004639][T15903] ? mutex_unlock+0xb2/0x260 [ 2058.009066][T15903] ? __mutex_lock_slowpath+0x10/0x10 [ 2058.014186][T15903] __x64_sys_clone+0x23f/0x290 [ 2058.018794][T15903] ? __do_sys_vfork+0x130/0x130 [ 2058.023470][T15903] ? ksys_write+0x260/0x2c0 [ 2058.027814][T15903] ? debug_smp_processor_id+0x17/0x20 [ 2058.033021][T15903] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2058.038920][T15903] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2058.044390][T15903] do_syscall_64+0x3d/0xb0 [ 2058.048641][T15903] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2058.054370][T15903] RIP: 0033:0x7f3c5e561da9 [ 2058.058629][T15903] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2058.078064][T15903] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2058.086308][T15903] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:25 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x78, 0x23, 0x0, 0x0, 0x80, 0x50d8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xe}, 0x6e3c6432d1624d26, 0x0, 0x0, 0x7, 0x3db, 0x1, 0x1086, 0x0, 0xf70, 0x0, 0x80d}, r5, 0x1, r4, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x81, 0x1, 0x6, 0x99, 0x0, 0x2, 0x802, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000800)}, 0xc00, 0x4, 0x1, 0x0, 0x3f, 0x4, 0x1000, 0x0, 0x201, 0x0, 0xfff}, r5, 0x2, r1, 0x2) write$cgroup_pid(r3, &(0x7f0000000100)=r5, 0x12) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1c, 0x0, 0x2, 0x5, 0x0, 0x6, 0x10, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x200, 0x7ff, 0x9, 0x2, 0x3, 0xf5d, 0x2000, 0x0, 0x92, 0x0, 0x8}, r5, 0xa, r0, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x5000}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r9}, 0x18) openat$cgroup_ro(r9, &(0x7f0000000300)='memory.swap.events\x00', 0x0, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000040), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x435) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:25 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00694d202d6cffdf7866cf0fc4252aec29f73555de3f6f202b63"], 0x1a) [ 2058.094120][T15903] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2058.101932][T15903] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2058.109749][T15903] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2058.117555][T15903] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2058.125369][T15903] 05:20:25 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00694d202d6cffdf7866cf0fc4252aec29f73555de3f6f202b63"], 0x1a) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00694d202d6cffdf7866cf0fc4252aec29f73555de3f6f202b63"], 0x1a) (async) 05:20:25 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00694d202d6cffdf7866cf0fc4252aec29f73555de3f6f202b63"], 0x1a) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00694d202d6cffdf7866cf0fc4252aec29f73555de3f6f202b63"], 0x1a) 05:20:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x409, 0x12) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'cpuacct'}, {0x2b, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'memory'}, {0x2b, 'cpu'}, {0x2b, 'net_cls'}]}, 0x2b) 05:20:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x409, 0x12) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'cpuacct'}, {0x2b, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'memory'}, {0x2b, 'cpu'}, {0x2b, 'net_cls'}]}, 0x2b) 05:20:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 47) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040)=0x409, 0x12) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'cpuacct'}, {0x2b, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'memory'}, {0x2b, 'cpu'}, {0x2b, 'net_cls'}]}, 0x2b) [ 2058.378663][T16134] FAULT_INJECTION: forcing a failure. [ 2058.378663][T16134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2058.399094][T16134] CPU: 0 PID: 16134 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2058.409268][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2058.419158][T16134] Call Trace: [ 2058.422280][T16134] [ 2058.425058][T16134] dump_stack_lvl+0x151/0x1b7 [ 2058.429573][T16134] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2058.435041][T16134] dump_stack+0x15/0x17 [ 2058.439035][T16134] should_fail+0x3c6/0x510 [ 2058.443286][T16134] should_fail_alloc_page+0x5a/0x80 [ 2058.448316][T16134] prepare_alloc_pages+0x15c/0x700 [ 2058.453270][T16134] ? __alloc_pages_bulk+0xe40/0xe40 [ 2058.458389][T16134] __alloc_pages+0x18c/0x8f0 [ 2058.462812][T16134] ? prep_new_page+0x110/0x110 [ 2058.467416][T16134] ? __alloc_pages+0x27e/0x8f0 [ 2058.472020][T16134] ? __kasan_check_write+0x14/0x20 [ 2058.476960][T16134] ? _raw_spin_lock+0xa4/0x1b0 [ 2058.481560][T16134] pte_alloc_one+0x73/0x1b0 [ 2058.485901][T16134] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2058.490935][T16134] ? __pmd_alloc+0x48d/0x550 [ 2058.495361][T16134] __pte_alloc+0x86/0x350 [ 2058.499526][T16134] ? __pud_alloc+0x260/0x260 [ 2058.503951][T16134] ? __pud_alloc+0x213/0x260 [ 2058.508377][T16134] ? free_pgtables+0x280/0x280 [ 2058.512980][T16134] ? do_handle_mm_fault+0x2330/0x2330 [ 2058.518186][T16134] ? __stack_depot_save+0x34/0x470 [ 2058.523134][T16134] ? anon_vma_clone+0x9a/0x500 [ 2058.527736][T16134] copy_page_range+0x28a8/0x2f90 [ 2058.532506][T16134] ? __kasan_slab_alloc+0xb1/0xe0 [ 2058.537368][T16134] ? slab_post_alloc_hook+0x53/0x2c0 [ 2058.542489][T16134] ? kernel_clone+0x21e/0x9e0 [ 2058.547000][T16134] ? do_syscall_64+0x3d/0xb0 [ 2058.551426][T16134] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2058.557341][T16134] ? pfn_valid+0x1e0/0x1e0 [ 2058.561594][T16134] ? rwsem_write_trylock+0x15b/0x290 [ 2058.566704][T16134] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2058.572952][T16134] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2058.578509][T16134] ? __rb_insert_augmented+0x5de/0x610 [ 2058.583807][T16134] copy_mm+0xc7e/0x13e0 [ 2058.587801][T16134] ? copy_signal+0x610/0x610 [ 2058.592222][T16134] ? __init_rwsem+0xd6/0x1c0 [ 2058.596651][T16134] ? copy_signal+0x4e3/0x610 [ 2058.601075][T16134] copy_process+0x1149/0x3290 [ 2058.605595][T16134] ? proc_fail_nth_write+0x20b/0x290 [ 2058.610709][T16134] ? fsnotify_perm+0x6a/0x5d0 [ 2058.615223][T16134] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2058.620170][T16134] ? vfs_write+0x9ec/0x1110 [ 2058.624510][T16134] kernel_clone+0x21e/0x9e0 [ 2058.628848][T16134] ? file_end_write+0x1c0/0x1c0 [ 2058.633536][T16134] ? create_io_thread+0x1e0/0x1e0 [ 2058.638395][T16134] ? mutex_unlock+0xb2/0x260 [ 2058.642825][T16134] ? __mutex_lock_slowpath+0x10/0x10 [ 2058.647949][T16134] __x64_sys_clone+0x23f/0x290 [ 2058.652833][T16134] ? __do_sys_vfork+0x130/0x130 [ 2058.657513][T16134] ? ksys_write+0x260/0x2c0 [ 2058.661856][T16134] ? debug_smp_processor_id+0x17/0x20 [ 2058.667059][T16134] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2058.672964][T16134] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2058.678432][T16134] do_syscall_64+0x3d/0xb0 [ 2058.682682][T16134] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2058.688411][T16134] RIP: 0033:0x7f3c5e561da9 [ 2058.692667][T16134] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2058.712106][T16134] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2058.720449][T16134] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='svcrdma_no_rwctx_err\x00', r1}, 0x10) 05:20:26 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 48) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2058.728262][T16134] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2058.736074][T16134] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2058.743896][T16134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2058.751695][T16134] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2058.759514][T16134] 05:20:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='svcrdma_no_rwctx_err\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='svcrdma_no_rwctx_err\x00', r1}, 0x10) (async) [ 2058.804373][T16141] FAULT_INJECTION: forcing a failure. [ 2058.804373][T16141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2058.842494][T16141] CPU: 0 PID: 16141 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2058.852651][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2058.862544][T16141] Call Trace: [ 2058.865664][T16141] [ 2058.868445][T16141] dump_stack_lvl+0x151/0x1b7 [ 2058.872957][T16141] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2058.878425][T16141] dump_stack+0x15/0x17 [ 2058.882416][T16141] should_fail+0x3c6/0x510 [ 2058.886672][T16141] should_fail_alloc_page+0x5a/0x80 [ 2058.891704][T16141] prepare_alloc_pages+0x15c/0x700 [ 2058.896652][T16141] ? __alloc_pages+0x8f0/0x8f0 [ 2058.901252][T16141] ? __alloc_pages_bulk+0xe40/0xe40 [ 2058.906288][T16141] __alloc_pages+0x18c/0x8f0 [ 2058.910719][T16141] ? prep_new_page+0x110/0x110 [ 2058.915313][T16141] ? 0xffffffffa00022ac [ 2058.919303][T16141] ? is_bpf_text_address+0x172/0x190 [ 2058.924427][T16141] pte_alloc_one+0x73/0x1b0 [ 2058.928766][T16141] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2058.933800][T16141] ? arch_stack_walk+0xf3/0x140 [ 2058.938489][T16141] __pte_alloc+0x86/0x350 [ 2058.942652][T16141] ? free_pgtables+0x280/0x280 [ 2058.947253][T16141] ? _raw_spin_lock+0xa4/0x1b0 [ 2058.951852][T16141] ? __kasan_check_write+0x14/0x20 [ 2058.956812][T16141] copy_page_range+0x28a8/0x2f90 [ 2058.961573][T16141] ? __kasan_slab_alloc+0xb1/0xe0 [ 2058.966441][T16141] ? pfn_valid+0x1e0/0x1e0 [ 2058.970689][T16141] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 2058.976965][T16141] copy_mm+0xc7e/0x13e0 [ 2058.980962][T16141] ? copy_signal+0x610/0x610 [ 2058.985355][T16141] ? __init_rwsem+0xd6/0x1c0 [ 2058.989781][T16141] ? copy_signal+0x4e3/0x610 [ 2058.994207][T16141] copy_process+0x1149/0x3290 [ 2058.998723][T16141] ? proc_fail_nth_write+0x20b/0x290 [ 2059.003842][T16141] ? fsnotify_perm+0x6a/0x5d0 [ 2059.008364][T16141] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2059.013302][T16141] ? vfs_write+0x9ec/0x1110 [ 2059.017644][T16141] kernel_clone+0x21e/0x9e0 [ 2059.021980][T16141] ? file_end_write+0x1c0/0x1c0 [ 2059.026668][T16141] ? create_io_thread+0x1e0/0x1e0 [ 2059.031531][T16141] ? mutex_unlock+0xb2/0x260 [ 2059.035954][T16141] ? __mutex_lock_slowpath+0x10/0x10 [ 2059.041077][T16141] __x64_sys_clone+0x23f/0x290 [ 2059.045677][T16141] ? __do_sys_vfork+0x130/0x130 [ 2059.050361][T16141] ? ksys_write+0x260/0x2c0 [ 2059.054704][T16141] ? debug_smp_processor_id+0x17/0x20 [ 2059.059910][T16141] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2059.065814][T16141] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2059.071281][T16141] do_syscall_64+0x3d/0xb0 [ 2059.075534][T16141] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2059.081262][T16141] RIP: 0033:0x7f3c5e561da9 [ 2059.085515][T16141] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:20:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x78, 0x23, 0x0, 0x0, 0x80, 0x50d8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xe}, 0x6e3c6432d1624d26, 0x0, 0x0, 0x7, 0x3db, 0x1, 0x1086, 0x0, 0xf70, 0x0, 0x80d}, r5, 0x1, r4, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x81, 0x1, 0x6, 0x99, 0x0, 0x2, 0x802, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000800)}, 0xc00, 0x4, 0x1, 0x0, 0x3f, 0x4, 0x1000, 0x0, 0x201, 0x0, 0xfff}, r5, 0x2, r1, 0x2) (async) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x81, 0x1, 0x6, 0x99, 0x0, 0x2, 0x802, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000800)}, 0xc00, 0x4, 0x1, 0x0, 0x3f, 0x4, 0x1000, 0x0, 0x201, 0x0, 0xfff}, r5, 0x2, r1, 0x2) write$cgroup_pid(r3, &(0x7f0000000100)=r5, 0x12) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1c, 0x0, 0x2, 0x5, 0x0, 0x6, 0x10, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x200, 0x7ff, 0x9, 0x2, 0x3, 0xf5d, 0x2000, 0x0, 0x92, 0x0, 0x8}, r5, 0xa, r0, 0x1) (async) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1c, 0x0, 0x2, 0x5, 0x0, 0x6, 0x10, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x200, 0x7ff, 0x9, 0x2, 0x3, 0xf5d, 0x2000, 0x0, 0x92, 0x0, 0x8}, r5, 0xa, r0, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x5000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r9}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r9}, 0x18) openat$cgroup_ro(r9, &(0x7f0000000300)='memory.swap.events\x00', 0x0, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000040), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x435) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x435) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2059.104958][T16141] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2059.113202][T16141] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2059.121011][T16141] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2059.128824][T16141] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2059.136636][T16141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2059.144447][T16141] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2059.152265][T16141] 05:20:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='svcrdma_no_rwctx_err\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='svcrdma_no_rwctx_err\x00', r1}, 0x10) (async) 05:20:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x78, 0x23, 0x0, 0x0, 0x80, 0x50d8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xe}, 0x6e3c6432d1624d26, 0x0, 0x0, 0x7, 0x3db, 0x1, 0x1086, 0x0, 0xf70, 0x0, 0x80d}, r5, 0x1, r4, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x81, 0x1, 0x6, 0x99, 0x0, 0x2, 0x802, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000800)}, 0xc00, 0x4, 0x1, 0x0, 0x3f, 0x4, 0x1000, 0x0, 0x201, 0x0, 0xfff}, r5, 0x2, r1, 0x2) write$cgroup_pid(r3, &(0x7f0000000100)=r5, 0x12) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1c, 0x0, 0x2, 0x5, 0x0, 0x6, 0x10, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x200, 0x7ff, 0x9, 0x2, 0x3, 0xf5d, 0x2000, 0x0, 0x92, 0x0, 0x8}, r5, 0xa, r0, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x5000}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x5000}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) (async) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r9}, 0x18) openat$cgroup_ro(r9, &(0x7f0000000300)='memory.swap.events\x00', 0x0, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000040), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x435) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 49) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:26 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000e40), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x17, 0x0, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x4, 0x54, &(0x7f0000000e40)=""/84, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x1}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001080)=[{0x0, 0x2, 0xb, 0x8}], 0x10, 0x7fffffff}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b70500cf2a02f076f7a2794f5aec790858ae0e0008000000"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x50}, @datasec={0x2, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x1}, {0x1, 0x51f, 0x3}, {0x5, 0x2, 0x200}, {0x1, 0xd}], "a4"}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000006c0)=""/114, 0xa3, 0x72, 0x0, 0x400}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000006000000000000000200000018020000fdffffff0000000001000000850000008a000000186500000200000000000000020000001800000009000000000000000101000018000000080000db5427c100030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x51, '\x00', r3, 0x1, r4, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r2, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x0, 0x4, 0xb}, {0x2, 0x1, 0x0, 0x4}]}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r7, 0x0, 0x0}, 0xa) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0xfff}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0xf, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3b35, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x6, 0x1}, 0x10, r5, r6, 0x1, &(0x7f0000001640)=[r7, r8, r9, r10, r11, r12], &(0x7f0000001680)=[{0x5, 0x5, 0x7}], 0x10, 0x3}, 0x90) r13 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000240), 0x12) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r15 = openat$cgroup_procs(r14, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r15, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2059.287822][T16267] FAULT_INJECTION: forcing a failure. [ 2059.287822][T16267] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.312926][T16267] CPU: 1 PID: 16267 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2059.323084][T16267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2059.332979][T16267] Call Trace: [ 2059.336102][T16267] [ 2059.338881][T16267] dump_stack_lvl+0x151/0x1b7 [ 2059.343394][T16267] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2059.348864][T16267] dump_stack+0x15/0x17 [ 2059.352853][T16267] should_fail+0x3c6/0x510 [ 2059.357109][T16267] __should_failslab+0xa4/0xe0 [ 2059.361710][T16267] ? anon_vma_clone+0x9a/0x500 [ 2059.366309][T16267] should_failslab+0x9/0x20 [ 2059.370649][T16267] slab_pre_alloc_hook+0x37/0xd0 [ 2059.375420][T16267] ? anon_vma_clone+0x9a/0x500 [ 2059.380019][T16267] kmem_cache_alloc+0x44/0x200 [ 2059.384625][T16267] anon_vma_clone+0x9a/0x500 [ 2059.389050][T16267] anon_vma_fork+0x91/0x4e0 [ 2059.393388][T16267] ? anon_vma_name+0x4c/0x70 [ 2059.397814][T16267] ? vm_area_dup+0x17a/0x230 [ 2059.402240][T16267] copy_mm+0xa3a/0x13e0 [ 2059.406238][T16267] ? copy_signal+0x610/0x610 [ 2059.410660][T16267] ? __init_rwsem+0xd6/0x1c0 [ 2059.415085][T16267] ? copy_signal+0x4e3/0x610 [ 2059.419517][T16267] copy_process+0x1149/0x3290 [ 2059.424032][T16267] ? proc_fail_nth_write+0x20b/0x290 [ 2059.429150][T16267] ? fsnotify_perm+0x6a/0x5d0 [ 2059.433663][T16267] ? pidfd_show_fdinfo+0x2b0/0x2b0 05:20:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) [ 2059.438606][T16267] ? vfs_write+0x9ec/0x1110 [ 2059.442949][T16267] kernel_clone+0x21e/0x9e0 [ 2059.447285][T16267] ? file_end_write+0x1c0/0x1c0 [ 2059.451974][T16267] ? create_io_thread+0x1e0/0x1e0 [ 2059.456831][T16267] ? mutex_unlock+0xb2/0x260 [ 2059.461258][T16267] ? __mutex_lock_slowpath+0x10/0x10 [ 2059.466382][T16267] __x64_sys_clone+0x23f/0x290 [ 2059.470982][T16267] ? __do_sys_vfork+0x130/0x130 [ 2059.475665][T16267] ? ksys_write+0x260/0x2c0 [ 2059.480009][T16267] ? debug_smp_processor_id+0x17/0x20 [ 2059.485212][T16267] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2059.491116][T16267] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2059.496672][T16267] do_syscall_64+0x3d/0xb0 [ 2059.500925][T16267] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2059.506652][T16267] RIP: 0033:0x7f3c5e561da9 [ 2059.510905][T16267] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2059.530346][T16267] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2059.538593][T16267] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2059.546404][T16267] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2059.554213][T16267] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2059.562026][T16267] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2059.569840][T16267] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2059.577655][T16267] 05:20:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) 05:20:27 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="184d0908501785000400"/46], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}, 0x0, 0x4}, 0x0, 0xfffefeffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x600, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb61a, 0x13e}, 0x400, 0x244, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x8}, r1, 0xa, 0xffffffffffffffff, 0x0) (async) getpid() r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0x0, 0x1, 0x2c12, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x1}, 0x48) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x4, 0x4, 0x8, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x80, 0x1f, 0x7, 0x0, 0x0, 0x100, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x1}, 0x1002, 0x8, 0x0, 0x0, 0xfffffffffffc0000, 0x0, 0x0, 0x0, 0x5}, r1, 0xa, r2, 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff0100000000000001010000175600000000e1d2ba75aa0517469d7f0b481a6a1a00009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x200, 0xb4, &(0x7f0000000a80)=""/180, 0x403e6dd0f9c515f7, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x400, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3], 0x0, 0x10, 0x80000000}, 0x90) perf_event_open(0x0, 0x0, 0xf, r4, 0x0) (async) socketpair(0xf, 0x2, 0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3, 0xfd, 0x3, 0x1, 0x0, 0x9, 0x20, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x3ff, 0x7}, 0x8c8, 0x0, 0xf, 0x7, 0x5, 0x7, 0x9, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4004662b, &(0x7f00000005c0)=0x1) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) 05:20:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000e40), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x17, 0x0, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x4, 0x54, &(0x7f0000000e40)=""/84, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x1}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001080)=[{0x0, 0x2, 0xb, 0x8}], 0x10, 0x7fffffff}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x17, 0x0, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x4, 0x54, &(0x7f0000000e40)=""/84, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x1}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001080)=[{0x0, 0x2, 0xb, 0x8}], 0x10, 0x7fffffff}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b70500cf2a02f076f7a2794f5aec790858ae0e0008000000"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x50}, @datasec={0x2, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x1}, {0x1, 0x51f, 0x3}, {0x5, 0x2, 0x200}, {0x1, 0xd}], "a4"}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000006c0)=""/114, 0xa3, 0x72, 0x0, 0x400}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x50}, @datasec={0x2, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x1}, {0x1, 0x51f, 0x3}, {0x5, 0x2, 0x200}, {0x1, 0xd}], "a4"}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000006c0)=""/114, 0xa3, 0x72, 0x0, 0x400}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000006000000000000000200000018020000fdffffff0000000001000000850000008a000000186500000200000000000000020000001800000009000000000000000101000018000000080000db5427c100030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x51, '\x00', r3, 0x1, r4, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r2, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x0, 0x4, 0xb}, {0x2, 0x1, 0x0, 0x4}]}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r7, 0x0, 0x0}, 0xa) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0xfff}, 0xc) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0xfff}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0xf, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3b35, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x6, 0x1}, 0x10, r5, r6, 0x1, &(0x7f0000001640)=[r7, r8, r9, r10, r11, r12], &(0x7f0000001680)=[{0x5, 0x5, 0x7}], 0x10, 0x3}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0xf, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3b35, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x6, 0x1}, 0x10, r5, r6, 0x1, &(0x7f0000001640)=[r7, r8, r9, r10, r11, r12], &(0x7f0000001680)=[{0x5, 0x5, 0x7}], 0x10, 0x3}, 0x90) r13 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000240), 0x12) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r15 = openat$cgroup_procs(r14, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r15, &(0x7f0000000040), 0x12) (async) write$cgroup_pid(r15, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'io'}, {0x2b, 'cpu'}, {0x2b, 'net_prio'}, {0x2b, 'cpu'}, {0x2b, 'blkio'}]}, 0x1f) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) 05:20:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 50) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2059.823247][T16399] FAULT_INJECTION: forcing a failure. [ 2059.823247][T16399] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.836587][T16399] CPU: 0 PID: 16399 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2059.846747][T16399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2059.856635][T16399] Call Trace: [ 2059.859759][T16399] [ 2059.862537][T16399] dump_stack_lvl+0x151/0x1b7 [ 2059.867062][T16399] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2059.872520][T16399] dump_stack+0x15/0x17 [ 2059.876515][T16399] should_fail+0x3c6/0x510 [ 2059.880766][T16399] __should_failslab+0xa4/0xe0 [ 2059.885364][T16399] ? anon_vma_clone+0x9a/0x500 [ 2059.889965][T16399] should_failslab+0x9/0x20 [ 2059.894304][T16399] slab_pre_alloc_hook+0x37/0xd0 [ 2059.899081][T16399] ? anon_vma_clone+0x9a/0x500 [ 2059.903677][T16399] kmem_cache_alloc+0x44/0x200 [ 2059.908279][T16399] anon_vma_clone+0x9a/0x500 [ 2059.912705][T16399] anon_vma_fork+0x91/0x4e0 [ 2059.917045][T16399] ? anon_vma_name+0x4c/0x70 [ 2059.921478][T16399] ? vm_area_dup+0x17a/0x230 [ 2059.925898][T16399] copy_mm+0xa3a/0x13e0 [ 2059.929893][T16399] ? copy_signal+0x610/0x610 [ 2059.934316][T16399] ? __init_rwsem+0xd6/0x1c0 [ 2059.938743][T16399] ? copy_signal+0x4e3/0x610 [ 2059.943170][T16399] copy_process+0x1149/0x3290 [ 2059.947683][T16399] ? proc_fail_nth_write+0x20b/0x290 [ 2059.952807][T16399] ? fsnotify_perm+0x6a/0x5d0 [ 2059.957319][T16399] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2059.962263][T16399] ? vfs_write+0x9ec/0x1110 [ 2059.966610][T16399] kernel_clone+0x21e/0x9e0 [ 2059.970943][T16399] ? file_end_write+0x1c0/0x1c0 [ 2059.975636][T16399] ? create_io_thread+0x1e0/0x1e0 [ 2059.980489][T16399] ? mutex_unlock+0xb2/0x260 [ 2059.984917][T16399] ? __mutex_lock_slowpath+0x10/0x10 [ 2059.990046][T16399] __x64_sys_clone+0x23f/0x290 [ 2059.994640][T16399] ? __do_sys_vfork+0x130/0x130 [ 2059.999323][T16399] ? ksys_write+0x260/0x2c0 [ 2060.003669][T16399] ? debug_smp_processor_id+0x17/0x20 [ 2060.008871][T16399] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2060.014774][T16399] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2060.020242][T16399] do_syscall_64+0x3d/0xb0 [ 2060.024498][T16399] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2060.030221][T16399] RIP: 0033:0x7f3c5e561da9 [ 2060.034474][T16399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2060.053919][T16399] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2060.062165][T16399] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'io'}, {0x2b, 'cpu'}, {0x2b, 'net_prio'}, {0x2b, 'cpu'}, {0x2b, 'blkio'}]}, 0x1f) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) [ 2060.069979][T16399] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2060.077788][T16399] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2060.085597][T16399] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2060.093413][T16399] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2060.101233][T16399] 05:20:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'io'}, {0x2b, 'cpu'}, {0x2b, 'net_prio'}, {0x2b, 'cpu'}, {0x2b, 'blkio'}]}, 0x1f) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) 05:20:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x1a) 05:20:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000e40), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x17, 0x0, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x4, 0x54, &(0x7f0000000e40)=""/84, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x1}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001080)=[{0x0, 0x2, 0xb, 0x8}], 0x10, 0x7fffffff}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b70500cf2a02f076f7a2794f5aec790858ae0e0008000000"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x50}, @datasec={0x2, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x1}, {0x1, 0x51f, 0x3}, {0x5, 0x2, 0x200}, {0x1, 0xd}], "a4"}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000006c0)=""/114, 0xa3, 0x72, 0x0, 0x400}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000006000000000000000200000018020000fdffffff0000000001000000850000008a000000186500000200000000000000020000001800000009000000000000000101000018000000080000db5427c100030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x51, '\x00', r3, 0x1, r4, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r2, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x0, 0x4, 0xb}, {0x2, 0x1, 0x0, 0x4}]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000006000000000000000200000018020000fdffffff0000000001000000850000008a000000186500000200000000000000020000001800000009000000000000000101000018000000080000db5427c100030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x51, '\x00', r3, 0x1, r4, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r2, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x0, 0x4, 0xb}, {0x2, 0x1, 0x0, 0x4}]}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r7, 0x0, 0x0}, 0xa) (async) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r7, 0x0, 0x0}, 0xa) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0xfff}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0xf, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3b35, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x6, 0x1}, 0x10, r5, r6, 0x1, &(0x7f0000001640)=[r7, r8, r9, r10, r11, r12], &(0x7f0000001680)=[{0x5, 0x5, 0x7}], 0x10, 0x3}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0xf, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000040000000000000000600000018110000eb524303416f33072b5a619af6051ab482e50ed67cc171019c7e58ea629db282c8caf94e0f0573f965b94cbd9219f08294d058211e943529e5a2fcfd6353b86de38d47b1d412f14465a5a5a938529cb1e32b96be4384bcc8f1db97a0550ff2b299089adce87c2e5cc869a071bad8f5fb99467979f88001fb18d02b61a20226b14f95927f3a57db7201a778630210738a3fd51950966676b6952bde2bce7116c761ff5f81eafb08028821792f71a6f0d3190efb9cbc74f4c68551c1d0f339f0b3f072fa859a0908bdbd995802111998150b4e16e7de8e136aa29b74b031cbe0034634d2ef45df3579c69758686aea37731e1a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3b35, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x6, 0x1}, 0x10, r5, r6, 0x1, &(0x7f0000001640)=[r7, r8, r9, r10, r11, r12], &(0x7f0000001680)=[{0x5, 0x5, 0x7}], 0x10, 0x3}, 0x90) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r13 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000240), 0x12) (async) write$cgroup_pid(r13, &(0x7f0000000240), 0x12) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r15 = openat$cgroup_procs(r14, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r15, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 51) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 64) openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) (async) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x1a) 05:20:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0xeb0ac4903aa96c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x758}, 0x0, 0xa, 0xffffffffffffffff, 0xd) [ 2060.260615][T16567] FAULT_INJECTION: forcing a failure. [ 2060.260615][T16567] name failslab, interval 1, probability 0, space 0, times 0 [ 2060.287107][T16567] CPU: 1 PID: 16567 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2060.297259][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2060.307155][T16567] Call Trace: [ 2060.310281][T16567] [ 2060.313063][T16567] dump_stack_lvl+0x151/0x1b7 [ 2060.317572][T16567] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2060.323043][T16567] dump_stack+0x15/0x17 [ 2060.327030][T16567] should_fail+0x3c6/0x510 [ 2060.331286][T16567] __should_failslab+0xa4/0xe0 [ 2060.335885][T16567] ? anon_vma_fork+0x1df/0x4e0 [ 2060.340484][T16567] should_failslab+0x9/0x20 [ 2060.344822][T16567] slab_pre_alloc_hook+0x37/0xd0 [ 2060.349596][T16567] ? anon_vma_fork+0x1df/0x4e0 [ 2060.354197][T16567] kmem_cache_alloc+0x44/0x200 [ 2060.358798][T16567] anon_vma_fork+0x1df/0x4e0 [ 2060.363226][T16567] copy_mm+0xa3a/0x13e0 [ 2060.367222][T16567] ? copy_signal+0x610/0x610 [ 2060.371643][T16567] ? __init_rwsem+0xd6/0x1c0 [ 2060.376073][T16567] ? copy_signal+0x4e3/0x610 [ 2060.380499][T16567] copy_process+0x1149/0x3290 [ 2060.385012][T16567] ? proc_fail_nth_write+0x20b/0x290 [ 2060.390133][T16567] ? fsnotify_perm+0x6a/0x5d0 [ 2060.394645][T16567] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2060.399678][T16567] ? vfs_write+0x9ec/0x1110 [ 2060.404020][T16567] kernel_clone+0x21e/0x9e0 [ 2060.408357][T16567] ? file_end_write+0x1c0/0x1c0 [ 2060.413053][T16567] ? create_io_thread+0x1e0/0x1e0 [ 2060.417901][T16567] ? mutex_unlock+0xb2/0x260 [ 2060.422330][T16567] ? __mutex_lock_slowpath+0x10/0x10 [ 2060.427452][T16567] __x64_sys_clone+0x23f/0x290 [ 2060.432051][T16567] ? __do_sys_vfork+0x130/0x130 [ 2060.436754][T16567] ? ksys_write+0x260/0x2c0 [ 2060.441079][T16567] ? debug_smp_processor_id+0x17/0x20 [ 2060.446285][T16567] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2060.452188][T16567] ? exit_to_user_mode_prepare+0x39/0xa0 05:20:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000006bf7000000000000df04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x40, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x11000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x6, @perf_bp={&(0x7f0000000140)}, 0x4000, 0x7fffffff, 0xf5d5, 0x4, 0x3, 0x0, 0x9, 0x0, 0x9, 0x0, 0xe6}, r1, 0x2, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = getpid() perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x9b, 0x1, 0x7, 0x45, 0x0, 0x7, 0x1502a, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000005c0), 0x8}, 0x8000, 0x1, 0x40, 0x916d8e468774bc74, 0x1, 0x5, 0x1, 0x0, 0x6ca1da27, 0x0, 0x100000000}, r3, 0x7, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x40, 0x0, 0x7f, 0x1, 0x0, 0x2, 0x20000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x400, 0xa44}, 0x300e00, 0x80, 0x80000000, 0x6, 0x1, 0x10001, 0x1, 0x0, 0xa0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xd, 0x84, 0x81, 0x4, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp, 0x0, 0x1, 0x1ab2, 0x5, 0x200000000008, 0x10102}, 0x0, 0x109, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x8e900, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x78, 0x0, 0x3f, 0x7f, 0x0, 0x1, 0x10b42, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x7f, 0x80000000}, 0x12820, 0xa6, 0x3, 0x9, 0x1, 0x5, 0x1e, 0x0, 0xa5, 0x0, 0xffffffffffffba06}, r3, 0x10, r4, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000003c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x4700, 0x23fe00) perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0x4, 0x4, 0x1, 0x6, 0x0, 0x0, 0xa01d8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf55, 0x1, @perf_config_ext={0xbe, 0x7}, 0x10000, 0xff, 0x3, 0x2, 0x52e, 0xd1d, 0x8, 0x0, 0x4302c863}, r1, 0x5, 0xffffffffffffffff, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) [ 2060.457656][T16567] do_syscall_64+0x3d/0xb0 [ 2060.462344][T16567] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2060.468068][T16567] RIP: 0033:0x7f3c5e561da9 [ 2060.472324][T16567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2060.491766][T16567] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2060.500010][T16567] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0xeb0ac4903aa96c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x758}, 0x0, 0xa, 0xffffffffffffffff, 0xd) 05:20:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 52) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 32) openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) (rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) (async) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x1a) [ 2060.507819][T16567] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2060.515633][T16567] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2060.523443][T16567] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2060.531255][T16567] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2060.539074][T16567] 05:20:28 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2060.587818][T16739] FAULT_INJECTION: forcing a failure. [ 2060.587818][T16739] name failslab, interval 1, probability 0, space 0, times 0 [ 2060.656655][T16739] CPU: 1 PID: 16739 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2060.666854][T16739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2060.676757][T16739] Call Trace: [ 2060.679868][T16739] [ 2060.682647][T16739] dump_stack_lvl+0x151/0x1b7 [ 2060.687163][T16739] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2060.692631][T16739] dump_stack+0x15/0x17 [ 2060.696623][T16739] should_fail+0x3c6/0x510 [ 2060.700876][T16739] __should_failslab+0xa4/0xe0 [ 2060.705477][T16739] ? vm_area_dup+0x26/0x230 [ 2060.709816][T16739] should_failslab+0x9/0x20 [ 2060.714147][T16739] slab_pre_alloc_hook+0x37/0xd0 [ 2060.718923][T16739] ? vm_area_dup+0x26/0x230 [ 2060.723259][T16739] kmem_cache_alloc+0x44/0x200 [ 2060.727862][T16739] vm_area_dup+0x26/0x230 [ 2060.732028][T16739] copy_mm+0x9a1/0x13e0 [ 2060.736033][T16739] ? copy_signal+0x610/0x610 [ 2060.740445][T16739] ? __init_rwsem+0xd6/0x1c0 [ 2060.744873][T16739] ? copy_signal+0x4e3/0x610 [ 2060.749298][T16739] copy_process+0x1149/0x3290 [ 2060.753815][T16739] ? proc_fail_nth_write+0x20b/0x290 [ 2060.758939][T16739] ? fsnotify_perm+0x6a/0x5d0 [ 2060.763450][T16739] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2060.768393][T16739] ? vfs_write+0x9ec/0x1110 [ 2060.772734][T16739] kernel_clone+0x21e/0x9e0 [ 2060.777073][T16739] ? file_end_write+0x1c0/0x1c0 [ 2060.781760][T16739] ? create_io_thread+0x1e0/0x1e0 [ 2060.786619][T16739] ? mutex_unlock+0xb2/0x260 [ 2060.791057][T16739] ? __mutex_lock_slowpath+0x10/0x10 [ 2060.796169][T16739] __x64_sys_clone+0x23f/0x290 [ 2060.800771][T16739] ? __do_sys_vfork+0x130/0x130 [ 2060.805453][T16739] ? ksys_write+0x260/0x2c0 [ 2060.809803][T16739] ? debug_smp_processor_id+0x17/0x20 [ 2060.815177][T16739] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2060.821078][T16739] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2060.826555][T16739] do_syscall_64+0x3d/0xb0 [ 2060.830799][T16739] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2060.836525][T16739] RIP: 0033:0x7f3c5e561da9 [ 2060.840782][T16739] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2060.860223][T16739] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2060.868465][T16739] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2060.876275][T16739] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2060.884089][T16739] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2060.891899][T16739] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2060.899711][T16739] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 05:20:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) (async, rerun: 32) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (rerun: 32) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0xeb0ac4903aa96c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x758}, 0x0, 0xa, 0xffffffffffffffff, 0xd) 05:20:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000006bf7000000000000df04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x40, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x11000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x6, @perf_bp={&(0x7f0000000140)}, 0x4000, 0x7fffffff, 0xf5d5, 0x4, 0x3, 0x0, 0x9, 0x0, 0x9, 0x0, 0xe6}, r1, 0x2, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) (async) r3 = getpid() perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x9b, 0x1, 0x7, 0x45, 0x0, 0x7, 0x1502a, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000005c0), 0x8}, 0x8000, 0x1, 0x40, 0x916d8e468774bc74, 0x1, 0x5, 0x1, 0x0, 0x6ca1da27, 0x0, 0x100000000}, r3, 0x7, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x40, 0x0, 0x7f, 0x1, 0x0, 0x2, 0x20000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x400, 0xa44}, 0x300e00, 0x80, 0x80000000, 0x6, 0x1, 0x10001, 0x1, 0x0, 0xa0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.events\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xd, 0x84, 0x81, 0x4, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp, 0x0, 0x1, 0x1ab2, 0x5, 0x200000000008, 0x10102}, 0x0, 0x109, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) (async) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x8e900, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x78, 0x0, 0x3f, 0x7f, 0x0, 0x1, 0x10b42, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x7f, 0x80000000}, 0x12820, 0xa6, 0x3, 0x9, 0x1, 0x5, 0x1e, 0x0, 0xa5, 0x0, 0xffffffffffffba06}, r3, 0x10, r4, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000003c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) write$cgroup_int(r5, &(0x7f0000000200)=0x4700, 0x23fe00) (async) perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0x4, 0x4, 0x1, 0x6, 0x0, 0x0, 0xa01d8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf55, 0x1, @perf_config_ext={0xbe, 0x7}, 0x10000, 0xff, 0x3, 0x2, 0x52e, 0xd1d, 0x8, 0x0, 0x4302c863}, r1, 0x5, 0xffffffffffffffff, 0x5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) [ 2060.907528][T16739] 05:20:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000280)=""/232, 0xe8}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 53) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000006bf7000000000000df04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x40, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x11000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x6, @perf_bp={&(0x7f0000000140)}, 0x4000, 0x7fffffff, 0xf5d5, 0x4, 0x3, 0x0, 0x9, 0x0, 0x9, 0x0, 0xe6}, r1, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) getpid() (async) r3 = getpid() perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x9b, 0x1, 0x7, 0x45, 0x0, 0x7, 0x1502a, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000005c0), 0x8}, 0x8000, 0x1, 0x40, 0x916d8e468774bc74, 0x1, 0x5, 0x1, 0x0, 0x6ca1da27, 0x0, 0x100000000}, r3, 0x7, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x9b, 0x1, 0x7, 0x45, 0x0, 0x7, 0x1502a, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000005c0), 0x8}, 0x8000, 0x1, 0x40, 0x916d8e468774bc74, 0x1, 0x5, 0x1, 0x0, 0x6ca1da27, 0x0, 0x100000000}, r3, 0x7, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x40, 0x0, 0x7f, 0x1, 0x0, 0x2, 0x20000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x400, 0xa44}, 0x300e00, 0x80, 0x80000000, 0x6, 0x1, 0x10001, 0x1, 0x0, 0xa0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xd, 0x84, 0x81, 0x4, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp, 0x0, 0x1, 0x1ab2, 0x5, 0x200000000008, 0x10102}, 0x0, 0x109, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x8e900, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x8e900, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x78, 0x0, 0x3f, 0x7f, 0x0, 0x1, 0x10b42, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x7f, 0x80000000}, 0x12820, 0xa6, 0x3, 0x9, 0x1, 0x5, 0x1e, 0x0, 0xa5, 0x0, 0xffffffffffffba06}, r3, 0x10, r4, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000003c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x4700, 0x23fe00) perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0x4, 0x4, 0x1, 0x6, 0x0, 0x0, 0xa01d8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf55, 0x1, @perf_config_ext={0xbe, 0x7}, 0x10000, 0xff, 0x3, 0x2, 0x52e, 0xd1d, 0x8, 0x0, 0x4302c863}, r1, 0x5, 0xffffffffffffffff, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) [ 2060.978136][T16764] FAULT_INJECTION: forcing a failure. [ 2060.978136][T16764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2060.999312][T16764] CPU: 1 PID: 16764 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2061.009470][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2061.019364][T16764] Call Trace: [ 2061.022487][T16764] [ 2061.025266][T16764] dump_stack_lvl+0x151/0x1b7 [ 2061.029781][T16764] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2061.035249][T16764] dump_stack+0x15/0x17 [ 2061.039239][T16764] should_fail+0x3c6/0x510 [ 2061.043494][T16764] should_fail_alloc_page+0x5a/0x80 [ 2061.048525][T16764] prepare_alloc_pages+0x15c/0x700 [ 2061.053477][T16764] ? __alloc_pages_bulk+0xe40/0xe40 [ 2061.058515][T16764] __alloc_pages+0x18c/0x8f0 [ 2061.062939][T16764] ? prep_new_page+0x110/0x110 [ 2061.067540][T16764] get_zeroed_page+0x1b/0x40 [ 2061.071964][T16764] __pud_alloc+0x8b/0x260 [ 2061.076132][T16764] ? stack_trace_snprint+0xf0/0xf0 [ 2061.081075][T16764] ? do_handle_mm_fault+0x2330/0x2330 [ 2061.086283][T16764] ? __stack_depot_save+0x34/0x470 [ 2061.091229][T16764] ? anon_vma_clone+0x9a/0x500 [ 2061.095830][T16764] copy_page_range+0x2bcf/0x2f90 [ 2061.100603][T16764] ? __kasan_slab_alloc+0xb1/0xe0 [ 2061.105464][T16764] ? slab_post_alloc_hook+0x53/0x2c0 [ 2061.110585][T16764] ? copy_mm+0xa3a/0x13e0 [ 2061.114753][T16764] ? copy_process+0x1149/0x3290 [ 2061.119435][T16764] ? kernel_clone+0x21e/0x9e0 [ 2061.123951][T16764] ? __x64_sys_clone+0x23f/0x290 [ 2061.128726][T16764] ? do_syscall_64+0x3d/0xb0 [ 2061.133149][T16764] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2061.139068][T16764] ? pfn_valid+0x1e0/0x1e0 [ 2061.143310][T16764] ? rwsem_write_trylock+0x15b/0x290 [ 2061.148426][T16764] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2061.154677][T16764] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2061.160231][T16764] ? __rb_insert_augmented+0x5de/0x610 [ 2061.165530][T16764] copy_mm+0xc7e/0x13e0 [ 2061.169530][T16764] ? copy_signal+0x610/0x610 [ 2061.173946][T16764] ? __init_rwsem+0xd6/0x1c0 [ 2061.178371][T16764] ? copy_signal+0x4e3/0x610 [ 2061.182799][T16764] copy_process+0x1149/0x3290 [ 2061.187316][T16764] ? proc_fail_nth_write+0x20b/0x290 [ 2061.192433][T16764] ? fsnotify_perm+0x6a/0x5d0 [ 2061.196978][T16764] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2061.201891][T16764] ? vfs_write+0x9ec/0x1110 [ 2061.206230][T16764] kernel_clone+0x21e/0x9e0 [ 2061.210565][T16764] ? file_end_write+0x1c0/0x1c0 [ 2061.215339][T16764] ? create_io_thread+0x1e0/0x1e0 [ 2061.220198][T16764] ? mutex_unlock+0xb2/0x260 [ 2061.224626][T16764] ? __mutex_lock_slowpath+0x10/0x10 [ 2061.229752][T16764] __x64_sys_clone+0x23f/0x290 [ 2061.234347][T16764] ? __do_sys_vfork+0x130/0x130 [ 2061.239033][T16764] ? ksys_write+0x260/0x2c0 [ 2061.243374][T16764] ? debug_smp_processor_id+0x17/0x20 [ 2061.248579][T16764] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2061.254489][T16764] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2061.259954][T16764] do_syscall_64+0x3d/0xb0 [ 2061.264205][T16764] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2061.269938][T16764] RIP: 0033:0x7f3c5e561da9 [ 2061.274185][T16764] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2061.293627][T16764] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2061.301871][T16764] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2061.309693][T16764] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2061.317495][T16764] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000280)=""/232, 0xe8}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 54) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2061.325305][T16764] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2061.333116][T16764] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2061.341024][T16764] 05:20:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x80214, 0x0, 0x2, 0x9, 0x5dca, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) [ 2061.412533][T16874] FAULT_INJECTION: forcing a failure. [ 2061.412533][T16874] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.426657][T16874] CPU: 1 PID: 16874 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2061.436815][T16874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2061.446706][T16874] Call Trace: [ 2061.449830][T16874] [ 2061.452607][T16874] dump_stack_lvl+0x151/0x1b7 [ 2061.457121][T16874] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2061.462591][T16874] dump_stack+0x15/0x17 [ 2061.466592][T16874] should_fail+0x3c6/0x510 [ 2061.470846][T16874] __should_failslab+0xa4/0xe0 [ 2061.475434][T16874] ? vm_area_dup+0x26/0x230 [ 2061.479775][T16874] should_failslab+0x9/0x20 [ 2061.484114][T16874] slab_pre_alloc_hook+0x37/0xd0 [ 2061.488893][T16874] ? vm_area_dup+0x26/0x230 [ 2061.493227][T16874] kmem_cache_alloc+0x44/0x200 [ 2061.497832][T16874] vm_area_dup+0x26/0x230 [ 2061.501996][T16874] copy_mm+0x9a1/0x13e0 [ 2061.505990][T16874] ? copy_signal+0x610/0x610 [ 2061.510411][T16874] ? __init_rwsem+0xd6/0x1c0 [ 2061.514838][T16874] ? copy_signal+0x4e3/0x610 [ 2061.519268][T16874] copy_process+0x1149/0x3290 [ 2061.523782][T16874] ? proc_fail_nth_write+0x20b/0x290 [ 2061.528902][T16874] ? fsnotify_perm+0x6a/0x5d0 [ 2061.533414][T16874] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2061.538360][T16874] ? vfs_write+0x9ec/0x1110 [ 2061.542702][T16874] kernel_clone+0x21e/0x9e0 [ 2061.547038][T16874] ? file_end_write+0x1c0/0x1c0 [ 2061.551726][T16874] ? create_io_thread+0x1e0/0x1e0 [ 2061.556585][T16874] ? mutex_unlock+0xb2/0x260 [ 2061.561013][T16874] ? __mutex_lock_slowpath+0x10/0x10 [ 2061.566136][T16874] __x64_sys_clone+0x23f/0x290 [ 2061.570737][T16874] ? __do_sys_vfork+0x130/0x130 [ 2061.575421][T16874] ? ksys_write+0x260/0x2c0 [ 2061.579761][T16874] ? debug_smp_processor_id+0x17/0x20 [ 2061.584966][T16874] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2061.590870][T16874] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2061.596350][T16874] do_syscall_64+0x3d/0xb0 [ 2061.600594][T16874] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2061.606321][T16874] RIP: 0033:0x7f3c5e561da9 [ 2061.610576][T16874] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2061.630022][T16874] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2061.638259][T16874] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2061.646074][T16874] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2061.653889][T16874] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2061.661695][T16874] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2061.669508][T16874] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2061.677325][T16874] 05:20:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 55) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x90) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x80214, 0x0, 0x2, 0x9, 0x5dca, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) [ 2061.747188][T16882] FAULT_INJECTION: forcing a failure. [ 2061.747188][T16882] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.767520][T16882] CPU: 0 PID: 16882 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2061.777677][T16882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2061.787586][T16882] Call Trace: [ 2061.790694][T16882] [ 2061.793472][T16882] dump_stack_lvl+0x151/0x1b7 [ 2061.797989][T16882] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2061.803458][T16882] dump_stack+0x15/0x17 [ 2061.807449][T16882] should_fail+0x3c6/0x510 [ 2061.811701][T16882] __should_failslab+0xa4/0xe0 [ 2061.816299][T16882] ? vm_area_dup+0x26/0x230 [ 2061.820639][T16882] should_failslab+0x9/0x20 [ 2061.824979][T16882] slab_pre_alloc_hook+0x37/0xd0 [ 2061.829753][T16882] ? vm_area_dup+0x26/0x230 [ 2061.834089][T16882] kmem_cache_alloc+0x44/0x200 [ 2061.838690][T16882] vm_area_dup+0x26/0x230 [ 2061.842856][T16882] copy_mm+0x9a1/0x13e0 [ 2061.846852][T16882] ? copy_signal+0x610/0x610 [ 2061.851275][T16882] ? __init_rwsem+0xd6/0x1c0 [ 2061.855700][T16882] ? copy_signal+0x4e3/0x610 [ 2061.860126][T16882] copy_process+0x1149/0x3290 [ 2061.864645][T16882] ? proc_fail_nth_write+0x20b/0x290 [ 2061.869759][T16882] ? fsnotify_perm+0x6a/0x5d0 [ 2061.874274][T16882] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2061.879221][T16882] ? vfs_write+0x9ec/0x1110 [ 2061.883562][T16882] kernel_clone+0x21e/0x9e0 [ 2061.887899][T16882] ? file_end_write+0x1c0/0x1c0 [ 2061.892589][T16882] ? create_io_thread+0x1e0/0x1e0 [ 2061.897448][T16882] ? mutex_unlock+0xb2/0x260 [ 2061.901873][T16882] ? __mutex_lock_slowpath+0x10/0x10 [ 2061.906997][T16882] __x64_sys_clone+0x23f/0x290 [ 2061.911596][T16882] ? __do_sys_vfork+0x130/0x130 [ 2061.916289][T16882] ? ksys_write+0x260/0x2c0 [ 2061.920633][T16882] ? debug_smp_processor_id+0x17/0x20 [ 2061.925833][T16882] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2061.931732][T16882] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2061.937201][T16882] do_syscall_64+0x3d/0xb0 [ 2061.941455][T16882] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2061.947181][T16882] RIP: 0033:0x7f3c5e561da9 [ 2061.951436][T16882] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2061.970874][T16882] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2061.979122][T16882] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2061.986931][T16882] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 56) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x90) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x80214, 0x0, 0x2, 0x9, 0x5dca, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) 05:20:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xffffffffffffffff) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) syz_clone(0x4000, &(0x7f00000000c0)="675a1c1399250ba3ed7fe0a551715916c6c324432ae587f6913df2bb0cc559bfe7e33e7c0df437d5199b16278f05574b", 0x30, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)="f02cd2a6c6929876911402ae1ade18d2572102049d1691e9536a7ad11cf60de71a62e92dfab09fe1775c8b11fad92493ab3fa311c47f62f4e6b078c4fe6b990af8def586e6b64dd6c758bb0fd5eca37b4d054971b61713e0383bde31eba9dd3d9e1569ed3b112b7e8fdd817a434f35666341dd12e9f2a1852c5810e70de9318bc92804bb7a7c2627aa043eb49dabc40ff3cb8a5e26f06ac70f32f280c9e6a060f4b43c5c13ff782d85b51eb031bce38f78a21210b3cb0fb2ab0949cbafec69e7c673806d015967b43726645c083a91a70c83913da9d8169545be42f7c8597c95842113a676a159d5c3174aeae0d120dfe65a7cbc168fb48bfffe49") write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) syz_clone(0x90100, &(0x7f00000003c0)="7e3f3c49620748a75cf506f44eb1071736577bcb346ef9533ea1eeef3696e0f58ffdfb3096833677ac5a0ee32f43dc803826804e5ac0cab7a0a99861ad2631d0c5bfaf50528a66bb50aae250639c0e8d62b69e354d3578ffb06eb0783e6b3867c66b57be4df0646980e9855a30f377262d5bd42a38cd488ca16c283d14a0a04d47e35fa7b64e79c80557454a427d08e763e523191cc509f3be55d064b775b156e889943cd3fb3dbe7d649d8d7601903760a763b53a94130a2533a5b489e17efa3d8757ee7fcc19573ae0e48a5aebd876a3b8a610d092399513ee", 0xda, &(0x7f0000000200), &(0x7f00000004c0), &(0x7f0000000600)="a3856ba97e326c36fe78afc154f55143f1fbf577a06798bbaf195ea14a40e255a7a3fdf381286a841b73e855d899b177d56192ec74b3da5475d7c34f2208e8d612bb23d65b7085e0536a05651332607b67ec203beeeba2489036933d4d603d37135652c19676eac62103d696dc35a9175ea36c8541e9c81c7bbdfec4c16935f3308f6753b4c63689e27a818aa68526859b51f465075e2e67c0f491e35e7ec49fb7c93e1f538d2cb4f905666a93d61e997e43cd") r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2061.994743][T16882] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2062.002555][T16882] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2062.010372][T16882] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2062.018188][T16882] 05:20:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000880), &(0x7f0000000640)=[{0x0, 0x0, 0x4, 0x1}]}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x20, &(0x7f0000000c00)={&(0x7f0000000b00)=""/191, 0xbf, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r3, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x20, 0x7, 0x2a01, r1, 0x9, '\x00', 0x0, r3, 0x3, 0x0, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x5, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="183200000100000000000200000018120000000000005f3696eee118a55f503cf756189777ac58485d11beb309af55534a4053f64305a0b8dcc3bca438af9a0dc34f800dc01db9c8a46c95a8d1b2806b44719e1962048d856dfd8c441013912804c297e3531944c7ab8cfb95324a7800729fced64460a95a2a190bf9f18e4e891f7531a0c8ce200c4d1e8681a7d11b1c5710fd1666e9bc034da92ac708c6663bf2ca7a72e1299459c6077cdeae352e8835d39a1b115b02651b751de98a857cc42827d440d56325385e555331e779b91b3adfd439", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700ff0700000000000000002020702500e1ffffff2020207b1af8ff00000000bfa100000000050007010000f8ffffffb70200000000b703000004000000850000000600000095000000000000"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000014c0)=[r1, r3, r5], &(0x7f0000001500)=[{}, {0x3, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1}], 0x10, 0xfffffffe}, 0x90) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x12, 0x3f, 0x80, 0x0, 0x100, 0x40, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x3}, 0x4022, 0xb44, 0x6, 0x0, 0x7fffffff, 0x975e, 0x8, 0x0, 0xfffff1a0, 0x0, 0x3}, r4, 0xffffffffffffffff, r4, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) getpid() perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2062.059900][T16890] FAULT_INJECTION: forcing a failure. [ 2062.059900][T16890] name failslab, interval 1, probability 0, space 0, times 0 [ 2062.080437][T16890] CPU: 1 PID: 16890 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2062.090608][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2062.100501][T16890] Call Trace: [ 2062.103623][T16890] 05:20:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xffffffffffffffff) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) syz_clone(0x4000, &(0x7f00000000c0)="675a1c1399250ba3ed7fe0a551715916c6c324432ae587f6913df2bb0cc559bfe7e33e7c0df437d5199b16278f05574b", 0x30, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)="f02cd2a6c6929876911402ae1ade18d2572102049d1691e9536a7ad11cf60de71a62e92dfab09fe1775c8b11fad92493ab3fa311c47f62f4e6b078c4fe6b990af8def586e6b64dd6c758bb0fd5eca37b4d054971b61713e0383bde31eba9dd3d9e1569ed3b112b7e8fdd817a434f35666341dd12e9f2a1852c5810e70de9318bc92804bb7a7c2627aa043eb49dabc40ff3cb8a5e26f06ac70f32f280c9e6a060f4b43c5c13ff782d85b51eb031bce38f78a21210b3cb0fb2ab0949cbafec69e7c673806d015967b43726645c083a91a70c83913da9d8169545be42f7c8597c95842113a676a159d5c3174aeae0d120dfe65a7cbc168fb48bfffe49") write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) syz_clone(0x90100, &(0x7f00000003c0)="7e3f3c49620748a75cf506f44eb1071736577bcb346ef9533ea1eeef3696e0f58ffdfb3096833677ac5a0ee32f43dc803826804e5ac0cab7a0a99861ad2631d0c5bfaf50528a66bb50aae250639c0e8d62b69e354d3578ffb06eb0783e6b3867c66b57be4df0646980e9855a30f377262d5bd42a38cd488ca16c283d14a0a04d47e35fa7b64e79c80557454a427d08e763e523191cc509f3be55d064b775b156e889943cd3fb3dbe7d649d8d7601903760a763b53a94130a2533a5b489e17efa3d8757ee7fcc19573ae0e48a5aebd876a3b8a610d092399513ee", 0xda, &(0x7f0000000200), &(0x7f00000004c0), &(0x7f0000000600)="a3856ba97e326c36fe78afc154f55143f1fbf577a06798bbaf195ea14a40e255a7a3fdf381286a841b73e855d899b177d56192ec74b3da5475d7c34f2208e8d612bb23d65b7085e0536a05651332607b67ec203beeeba2489036933d4d603d37135652c19676eac62103d696dc35a9175ea36c8541e9c81c7bbdfec4c16935f3308f6753b4c63689e27a818aa68526859b51f465075e2e67c0f491e35e7ec49fb7c93e1f538d2cb4f905666a93d61e997e43cd") r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2062.106405][T16890] dump_stack_lvl+0x151/0x1b7 [ 2062.110947][T16890] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2062.116383][T16890] dump_stack+0x15/0x17 [ 2062.120380][T16890] should_fail+0x3c6/0x510 [ 2062.124637][T16890] __should_failslab+0xa4/0xe0 [ 2062.129233][T16890] ? vm_area_dup+0x26/0x230 [ 2062.133576][T16890] should_failslab+0x9/0x20 [ 2062.137910][T16890] slab_pre_alloc_hook+0x37/0xd0 [ 2062.142689][T16890] ? vm_area_dup+0x26/0x230 [ 2062.147020][T16890] kmem_cache_alloc+0x44/0x200 [ 2062.151622][T16890] vm_area_dup+0x26/0x230 [ 2062.155788][T16890] copy_mm+0x9a1/0x13e0 [ 2062.159782][T16890] ? copy_signal+0x610/0x610 [ 2062.164208][T16890] ? __init_rwsem+0xd6/0x1c0 [ 2062.168632][T16890] ? copy_signal+0x4e3/0x610 [ 2062.173059][T16890] copy_process+0x1149/0x3290 [ 2062.177585][T16890] ? proc_fail_nth_write+0x20b/0x290 [ 2062.182692][T16890] ? fsnotify_perm+0x6a/0x5d0 [ 2062.187210][T16890] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2062.192154][T16890] ? vfs_write+0x9ec/0x1110 [ 2062.196494][T16890] kernel_clone+0x21e/0x9e0 [ 2062.200834][T16890] ? file_end_write+0x1c0/0x1c0 [ 2062.205520][T16890] ? create_io_thread+0x1e0/0x1e0 [ 2062.210379][T16890] ? mutex_unlock+0xb2/0x260 [ 2062.214806][T16890] ? __mutex_lock_slowpath+0x10/0x10 [ 2062.219927][T16890] __x64_sys_clone+0x23f/0x290 [ 2062.224528][T16890] ? __do_sys_vfork+0x130/0x130 [ 2062.229213][T16890] ? ksys_write+0x260/0x2c0 [ 2062.233556][T16890] ? debug_smp_processor_id+0x17/0x20 [ 2062.238762][T16890] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2062.244665][T16890] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2062.250133][T16890] do_syscall_64+0x3d/0xb0 [ 2062.254385][T16890] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2062.260112][T16890] RIP: 0033:0x7f3c5e561da9 [ 2062.264369][T16890] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2062.283807][T16890] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2062.292051][T16890] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2062.299865][T16890] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000040)}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000280)=""/232, 0xe8}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2062.307679][T16890] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2062.315486][T16890] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2062.323299][T16890] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2062.331116][T16890] 05:20:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000880), &(0x7f0000000640)=[{0x0, 0x0, 0x4, 0x1}]}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x20, &(0x7f0000000c00)={&(0x7f0000000b00)=""/191, 0xbf, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r3, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x20, 0x7, 0x2a01, r1, 0x9, '\x00', 0x0, r3, 0x3, 0x0, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x5, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="183200000100000000000200000018120000000000005f3696eee118a55f503cf756189777ac58485d11beb309af55534a4053f64305a0b8dcc3bca438af9a0dc34f800dc01db9c8a46c95a8d1b2806b44719e1962048d856dfd8c441013912804c297e3531944c7ab8cfb95324a7800729fced64460a95a2a190bf9f18e4e891f7531a0c8ce200c4d1e8681a7d11b1c5710fd1666e9bc034da92ac708c6663bf2ca7a72e1299459c6077cdeae352e8835d39a1b115b02651b751de98a857cc42827d440d56325385e555331e779b91b3adfd439", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700ff0700000000000000002020702500e1ffffff2020207b1af8ff00000000bfa100000000050007010000f8ffffffb70200000000b703000004000000850000000600000095000000000000"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000014c0)=[r1, r3, r5], &(0x7f0000001500)=[{}, {0x3, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1}], 0x10, 0xfffffffe}, 0x90) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x12, 0x3f, 0x80, 0x0, 0x100, 0x40, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x3}, 0x4022, 0xb44, 0x6, 0x0, 0x7fffffff, 0x975e, 0x8, 0x0, 0xfffff1a0, 0x0, 0x3}, r4, 0xffffffffffffffff, r4, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) getpid() perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000880), &(0x7f0000000640)=[{0x0, 0x0, 0x4, 0x1}]}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x20, &(0x7f0000000c00)={&(0x7f0000000b00)=""/191, 0xbf, 0x0, 0x0}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r3, 0xb) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x20, 0x7, 0x2a01, r1, 0x9, '\x00', 0x0, r3, 0x3, 0x0, 0x5}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001480), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x5, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="183200000100000000000200000018120000000000005f3696eee118a55f503cf756189777ac58485d11beb309af55534a4053f64305a0b8dcc3bca438af9a0dc34f800dc01db9c8a46c95a8d1b2806b44719e1962048d856dfd8c441013912804c297e3531944c7ab8cfb95324a7800729fced64460a95a2a190bf9f18e4e891f7531a0c8ce200c4d1e8681a7d11b1c5710fd1666e9bc034da92ac708c6663bf2ca7a72e1299459c6077cdeae352e8835d39a1b115b02651b751de98a857cc42827d440d56325385e555331e779b91b3adfd439", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700ff0700000000000000002020702500e1ffffff2020207b1af8ff00000000bfa100000000050007010000f8ffffffb70200000000b703000004000000850000000600000095000000000000"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000014c0)=[r1, r3, r5], &(0x7f0000001500)=[{}, {0x3, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1}], 0x10, 0xfffffffe}, 0x90) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x12, 0x3f, 0x80, 0x0, 0x100, 0x40, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x3}, 0x4022, 0xb44, 0x6, 0x0, 0x7fffffff, 0x975e, 0x8, 0x0, 0xfffff1a0, 0x0, 0x3}, r4, 0xffffffffffffffff, r4, 0x9) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 05:20:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 57) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00006f202d63707520da1d6c6b696f203c637075202b6360753054a7fc4ef9b1d9c8dd77c0df133934dbe0125fb2ce9ab683c0d7a66a44e411633d4c389ff46da4"], 0x1a) 05:20:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xffffffffffffffff) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) syz_clone(0x4000, &(0x7f00000000c0)="675a1c1399250ba3ed7fe0a551715916c6c324432ae587f6913df2bb0cc559bfe7e33e7c0df437d5199b16278f05574b", 0x30, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)="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") write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) syz_clone(0x90100, &(0x7f00000003c0)="7e3f3c49620748a75cf506f44eb1071736577bcb346ef9533ea1eeef3696e0f58ffdfb3096833677ac5a0ee32f43dc803826804e5ac0cab7a0a99861ad2631d0c5bfaf50528a66bb50aae250639c0e8d62b69e354d3578ffb06eb0783e6b3867c66b57be4df0646980e9855a30f377262d5bd42a38cd488ca16c283d14a0a04d47e35fa7b64e79c80557454a427d08e763e523191cc509f3be55d064b775b156e889943cd3fb3dbe7d649d8d7601903760a763b53a94130a2533a5b489e17efa3d8757ee7fcc19573ae0e48a5aebd876a3b8a610d092399513ee", 0xda, &(0x7f0000000200), &(0x7f00000004c0), &(0x7f0000000600)="a3856ba97e326c36fe78afc154f55143f1fbf577a06798bbaf195ea14a40e255a7a3fdf381286a841b73e855d899b177d56192ec74b3da5475d7c34f2208e8d612bb23d65b7085e0536a05651332607b67ec203beeeba2489036933d4d603d37135652c19676eac62103d696dc35a9175ea36c8541e9c81c7bbdfec4c16935f3308f6753b4c63689e27a818aa68526859b51f465075e2e67c0f491e35e7ec49fb7c93e1f538d2cb4f905666a93d61e997e43cd") r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:30 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000880), &(0x7f0000000640)=[{0x0, 0x0, 0x4, 0x1}]}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x20, &(0x7f0000000c00)={&(0x7f0000000b00)=""/191, 0xbf, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r3, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x20, 0x7, 0x2a01, r1, 0x9, '\x00', 0x0, r3, 0x3, 0x0, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x20, 0x7, 0x2a01, r1, 0x9, '\x00', 0x0, r3, 0x3, 0x0, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x5, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="183200000100000000000200000018120000000000005f3696eee118a55f503cf756189777ac58485d11beb309af55534a4053f64305a0b8dcc3bca438af9a0dc34f800dc01db9c8a46c95a8d1b2806b44719e1962048d856dfd8c441013912804c297e3531944c7ab8cfb95324a7800729fced64460a95a2a190bf9f18e4e891f7531a0c8ce200c4d1e8681a7d11b1c5710fd1666e9bc034da92ac708c6663bf2ca7a72e1299459c6077cdeae352e8835d39a1b115b02651b751de98a857cc42827d440d56325385e555331e779b91b3adfd439", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700ff0700000000000000002020702500e1ffffff2020207b1af8ff00000000bfa100000000050007010000f8ffffffb70200000000b703000004000000850000000600000095000000000000"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000014c0)=[r1, r3, r5], &(0x7f0000001500)=[{}, {0x3, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1}], 0x10, 0xfffffffe}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x5, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="183200000100000000000200000018120000000000005f3696eee118a55f503cf756189777ac58485d11beb309af55534a4053f64305a0b8dcc3bca438af9a0dc34f800dc01db9c8a46c95a8d1b2806b44719e1962048d856dfd8c441013912804c297e3531944c7ab8cfb95324a7800729fced64460a95a2a190bf9f18e4e891f7531a0c8ce200c4d1e8681a7d11b1c5710fd1666e9bc034da92ac708c6663bf2ca7a72e1299459c6077cdeae352e8835d39a1b115b02651b751de98a857cc42827d440d56325385e555331e779b91b3adfd439", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700ff0700000000000000002020702500e1ffffff2020207b1af8ff00000000bfa100000000050007010000f8ffffffb70200000000b703000004000000850000000600000095000000000000"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000014c0)=[r1, r3, r5], &(0x7f0000001500)=[{}, {0x3, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x1}], 0x10, 0xfffffffe}, 0x90) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x12, 0x3f, 0x80, 0x0, 0x100, 0x40, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x3}, 0x4022, 0xb44, 0x6, 0x0, 0x7fffffff, 0x975e, 0x8, 0x0, 0xfffff1a0, 0x0, 0x3}, r4, 0xffffffffffffffff, r4, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) getpid() (async) getpid() perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2062.419295][T17103] FAULT_INJECTION: forcing a failure. [ 2062.419295][T17103] name failslab, interval 1, probability 0, space 0, times 0 [ 2062.439228][T17103] CPU: 1 PID: 17103 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2062.449395][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2062.459290][T17103] Call Trace: [ 2062.462415][T17103] 05:20:30 executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d000085090100000000009500000000000000b7020000000000b5090000000000007baaf0ff00000000ce8700000000000007080000fffdffffbf2400000000000007060000f0ffffff7402000008000000182600"/116, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 05:20:30 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) r5 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x40, 0x7f, 0xd9, 0x2, 0x0, 0x800, 0xb4181, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0xa452d8e29a95bfcd}, 0x10, 0x9d2, 0x4, 0x9, 0x0, 0x7, 0x6, 0x0, 0x7954, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xf, r5, 0xb) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x45, 0x3, 0x7f, 0xdf, 0x0, 0x9, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff5f1d, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x7221, 0x5, 0x4, 0x8, 0x4, 0xab, 0x800, 0x0, 0x8000, 0x0, 0x4b}, r1, 0x10, r0, 0x0) [ 2062.465190][T17103] dump_stack_lvl+0x151/0x1b7 [ 2062.469705][T17103] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2062.475176][T17103] dump_stack+0x15/0x17 [ 2062.479163][T17103] should_fail+0x3c6/0x510 [ 2062.483418][T17103] __should_failslab+0xa4/0xe0 [ 2062.488019][T17103] ? vm_area_dup+0x26/0x230 [ 2062.492354][T17103] should_failslab+0x9/0x20 [ 2062.496697][T17103] slab_pre_alloc_hook+0x37/0xd0 [ 2062.501468][T17103] ? vm_area_dup+0x26/0x230 [ 2062.505804][T17103] kmem_cache_alloc+0x44/0x200 [ 2062.510410][T17103] vm_area_dup+0x26/0x230 [ 2062.514579][T17103] copy_mm+0x9a1/0x13e0 [ 2062.518582][T17103] ? copy_signal+0x610/0x610 [ 2062.522996][T17103] ? __init_rwsem+0xd6/0x1c0 [ 2062.527419][T17103] ? copy_signal+0x4e3/0x610 [ 2062.531849][T17103] copy_process+0x1149/0x3290 [ 2062.536460][T17103] ? proc_fail_nth_write+0x20b/0x290 [ 2062.541578][T17103] ? fsnotify_perm+0x6a/0x5d0 [ 2062.546088][T17103] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2062.551035][T17103] ? vfs_write+0x9ec/0x1110 [ 2062.555375][T17103] kernel_clone+0x21e/0x9e0 [ 2062.559714][T17103] ? file_end_write+0x1c0/0x1c0 [ 2062.564401][T17103] ? create_io_thread+0x1e0/0x1e0 [ 2062.569261][T17103] ? mutex_unlock+0xb2/0x260 [ 2062.573689][T17103] ? __mutex_lock_slowpath+0x10/0x10 [ 2062.578809][T17103] __x64_sys_clone+0x23f/0x290 [ 2062.583495][T17103] ? __do_sys_vfork+0x130/0x130 [ 2062.588180][T17103] ? ksys_write+0x260/0x2c0 [ 2062.592523][T17103] ? debug_smp_processor_id+0x17/0x20 [ 2062.597737][T17103] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2062.603630][T17103] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2062.609111][T17103] do_syscall_64+0x3d/0xb0 [ 2062.613351][T17103] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2062.619090][T17103] RIP: 0033:0x7f3c5e561da9 [ 2062.623349][T17103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2062.642777][T17103] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2062.651022][T17103] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2062.658829][T17103] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00006f202d63707520da1d6c6b696f203c637075202b6360753054a7fc4ef9b1d9c8dd77c0df133934dbe0125fb2ce9ab683c0d7a66a44e411633d4c389ff46da4"], 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00006f202d63707520da1d6c6b696f203c637075202b6360753054a7fc4ef9b1d9c8dd77c0df133934dbe0125fb2ce9ab683c0d7a66a44e411633d4c389ff46da4"], 0x1a) (async) 05:20:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 58) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:30 executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d000085090100000000009500000000000000b7020000000000b5090000000000007baaf0ff00000000ce8700000000000007080000fffdffffbf2400000000000007060000f0ffffff7402000008000000182600"/116, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d000085090100000000009500000000000000b7020000000000b5090000000000007baaf0ff00000000ce8700000000000007080000fffdffffbf2400000000000007060000f0ffffff7402000008000000182600"/116, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 2062.666641][T17103] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2062.674455][T17103] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2062.682265][T17103] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2062.690082][T17103] [ 2062.732521][T17237] FAULT_INJECTION: forcing a failure. [ 2062.732521][T17237] name failslab, interval 1, probability 0, space 0, times 0 [ 2062.746381][T17237] CPU: 0 PID: 17237 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2062.756539][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2062.766421][T17237] Call Trace: [ 2062.769546][T17237] [ 2062.772322][T17237] dump_stack_lvl+0x151/0x1b7 [ 2062.776843][T17237] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2062.782307][T17237] dump_stack+0x15/0x17 [ 2062.786296][T17237] should_fail+0x3c6/0x510 [ 2062.790552][T17237] __should_failslab+0xa4/0xe0 [ 2062.795149][T17237] ? vm_area_dup+0x26/0x230 [ 2062.799840][T17237] should_failslab+0x9/0x20 [ 2062.804174][T17237] slab_pre_alloc_hook+0x37/0xd0 [ 2062.808951][T17237] ? vm_area_dup+0x26/0x230 [ 2062.813288][T17237] kmem_cache_alloc+0x44/0x200 [ 2062.817891][T17237] vm_area_dup+0x26/0x230 [ 2062.822054][T17237] copy_mm+0x9a1/0x13e0 [ 2062.826052][T17237] ? copy_signal+0x610/0x610 05:20:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00006f202d63707520da1d6c6b696f203c637075202b6360753054a7fc4ef9b1d9c8dd77c0df133934dbe0125fb2ce9ab683c0d7a66a44e411633d4c389ff46da4"], 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00006f202d63707520da1d6c6b696f203c637075202b6360753054a7fc4ef9b1d9c8dd77c0df133934dbe0125fb2ce9ab683c0d7a66a44e411633d4c389ff46da4"], 0x1a) (async) [ 2062.830474][T17237] ? __init_rwsem+0xd6/0x1c0 [ 2062.834900][T17237] ? copy_signal+0x4e3/0x610 [ 2062.839327][T17237] copy_process+0x1149/0x3290 [ 2062.843843][T17237] ? proc_fail_nth_write+0x20b/0x290 [ 2062.848965][T17237] ? irqentry_exit_cond_resched+0x2a/0x30 [ 2062.854518][T17237] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2062.859469][T17237] kernel_clone+0x21e/0x9e0 [ 2062.863804][T17237] ? file_end_write+0x1c0/0x1c0 [ 2062.868497][T17237] ? create_io_thread+0x1e0/0x1e0 [ 2062.873350][T17237] ? mutex_unlock+0xb2/0x260 [ 2062.878736][T17237] ? __mutex_lock_slowpath+0x10/0x10 [ 2062.883858][T17237] __x64_sys_clone+0x23f/0x290 [ 2062.888459][T17237] ? __do_sys_vfork+0x130/0x130 [ 2062.893139][T17237] ? ksys_write+0x260/0x2c0 [ 2062.897483][T17237] ? debug_smp_processor_id+0x17/0x20 [ 2062.902686][T17237] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2062.908589][T17237] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2062.914057][T17237] do_syscall_64+0x3d/0xb0 [ 2062.918309][T17237] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2062.924036][T17237] RIP: 0033:0x7f3c5e561da9 [ 2062.928293][T17237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2062.947733][T17237] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2062.955978][T17237] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2062.963788][T17237] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2062.971600][T17237] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:30 executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d000085090100000000009500000000000000b7020000000000b5090000000000007baaf0ff00000000ce8700000000000007080000fffdffffbf2400000000000007060000f0ffffff7402000008000000182600"/116, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d000085090100000000009500000000000000b7020000000000b5090000000000007baaf0ff00000000ce8700000000000007080000fffdffffbf2400000000000007060000f0ffffff7402000008000000182600"/116, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 05:20:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, &(0x7f0000000080), &(0x7f0000000140)='syzkaller\x00', 0x3, 0x66, &(0x7f0000000180)=""/102, 0x41000, 0xc, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r4, r1], &(0x7f0000000680)=[{0x4, 0x3, 0x7, 0x7}, {0x1, 0x1, 0x0, 0x2}], 0x10, 0x6}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) close(r0) 05:20:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x0, 'cpu'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x1c) [ 2062.979412][T17237] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2062.987223][T17237] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2062.995042][T17237] 05:20:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 59) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2063.086274][T17363] FAULT_INJECTION: forcing a failure. [ 2063.086274][T17363] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.103978][T17363] CPU: 1 PID: 17363 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2063.114132][T17363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2063.124027][T17363] Call Trace: [ 2063.127152][T17363] [ 2063.129930][T17363] dump_stack_lvl+0x151/0x1b7 [ 2063.134443][T17363] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2063.139913][T17363] dump_stack+0x15/0x17 [ 2063.143904][T17363] should_fail+0x3c6/0x510 [ 2063.148154][T17363] __should_failslab+0xa4/0xe0 [ 2063.152752][T17363] ? vm_area_dup+0x26/0x230 [ 2063.157092][T17363] should_failslab+0x9/0x20 [ 2063.161430][T17363] slab_pre_alloc_hook+0x37/0xd0 [ 2063.166204][T17363] ? vm_area_dup+0x26/0x230 [ 2063.170545][T17363] kmem_cache_alloc+0x44/0x200 [ 2063.175147][T17363] vm_area_dup+0x26/0x230 [ 2063.179310][T17363] copy_mm+0x9a1/0x13e0 [ 2063.183309][T17363] ? copy_signal+0x610/0x610 [ 2063.187729][T17363] ? __init_rwsem+0xd6/0x1c0 [ 2063.192156][T17363] ? copy_signal+0x4e3/0x610 [ 2063.196583][T17363] copy_process+0x1149/0x3290 [ 2063.201097][T17363] ? proc_fail_nth_write+0x20b/0x290 [ 2063.206217][T17363] ? fsnotify_perm+0x6a/0x5d0 [ 2063.210733][T17363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2063.215676][T17363] ? vfs_write+0x9ec/0x1110 [ 2063.220020][T17363] kernel_clone+0x21e/0x9e0 [ 2063.224357][T17363] ? file_end_write+0x1c0/0x1c0 [ 2063.229045][T17363] ? create_io_thread+0x1e0/0x1e0 [ 2063.233902][T17363] ? mutex_unlock+0xb2/0x260 [ 2063.238332][T17363] ? __mutex_lock_slowpath+0x10/0x10 [ 2063.243454][T17363] __x64_sys_clone+0x23f/0x290 [ 2063.248054][T17363] ? __do_sys_vfork+0x130/0x130 [ 2063.252737][T17363] ? ksys_write+0x260/0x2c0 [ 2063.257081][T17363] ? debug_smp_processor_id+0x17/0x20 [ 2063.262284][T17363] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2063.268186][T17363] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2063.273657][T17363] do_syscall_64+0x3d/0xb0 [ 2063.277908][T17363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2063.283636][T17363] RIP: 0033:0x7f3c5e561da9 [ 2063.287893][T17363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2063.307332][T17363] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2063.315575][T17363] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2063.323387][T17363] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2063.331201][T17363] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2063.339010][T17363] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2063.346821][T17363] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2063.354639][T17363] 05:20:31 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, &(0x7f0000000080), &(0x7f0000000140)='syzkaller\x00', 0x3, 0x66, &(0x7f0000000180)=""/102, 0x41000, 0xc, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r4, r1], &(0x7f0000000680)=[{0x4, 0x3, 0x7, 0x7}, {0x1, 0x1, 0x0, 0x2}], 0x10, 0x6}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, &(0x7f0000000080), &(0x7f0000000140)='syzkaller\x00', 0x3, 0x66, &(0x7f0000000180)=""/102, 0x41000, 0xc, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r4, r1], &(0x7f0000000680)=[{0x4, 0x3, 0x7, 0x7}, {0x1, 0x1, 0x0, 0x2}], 0x10, 0x6}, 0x90) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) (async) close(r0) (async) 05:20:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x0, 'cpu'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x1c) 05:20:31 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) r5 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x40, 0x7f, 0xd9, 0x2, 0x0, 0x800, 0xb4181, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0xa452d8e29a95bfcd}, 0x10, 0x9d2, 0x4, 0x9, 0x0, 0x7, 0x6, 0x0, 0x7954, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xf, r5, 0xb) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x45, 0x3, 0x7f, 0xdf, 0x0, 0x9, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff5f1d, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x7221, 0x5, 0x4, 0x8, 0x4, 0xab, 0x800, 0x0, 0x8000, 0x0, 0x4b}, r1, 0x10, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x40, 0x7f, 0xd9, 0x2, 0x0, 0x800, 0xb4181, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0xa452d8e29a95bfcd}, 0x10, 0x9d2, 0x4, 0x9, 0x0, 0x7, 0x6, 0x0, 0x7954, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xf, r5, 0xb) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x45, 0x3, 0x7f, 0xdf, 0x0, 0x9, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff5f1d, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x7221, 0x5, 0x4, 0x8, 0x4, 0xab, 0x800, 0x0, 0x8000, 0x0, 0x4b}, r1, 0x10, r0, 0x0) (async) 05:20:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 60) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x0, 'cpu'}, {0x2b, 'freezer'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}]}, 0x1c) 05:20:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, &(0x7f0000000080), &(0x7f0000000140)='syzkaller\x00', 0x3, 0x66, &(0x7f0000000180)=""/102, 0x41000, 0xc, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r4, r1], &(0x7f0000000680)=[{0x4, 0x3, 0x7, 0x7}, {0x1, 0x1, 0x0, 0x2}], 0x10, 0x6}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) (async) close(r0) [ 2063.434696][T17383] FAULT_INJECTION: forcing a failure. [ 2063.434696][T17383] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.451605][T17383] CPU: 1 PID: 17383 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2063.461760][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2063.471656][T17383] Call Trace: [ 2063.474782][T17383] [ 2063.477559][T17383] dump_stack_lvl+0x151/0x1b7 [ 2063.482071][T17383] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2063.487538][T17383] dump_stack+0x15/0x17 [ 2063.491526][T17383] should_fail+0x3c6/0x510 [ 2063.495781][T17383] __should_failslab+0xa4/0xe0 [ 2063.500380][T17383] ? vm_area_dup+0x26/0x230 [ 2063.504718][T17383] should_failslab+0x9/0x20 [ 2063.509059][T17383] slab_pre_alloc_hook+0x37/0xd0 [ 2063.513833][T17383] ? vm_area_dup+0x26/0x230 [ 2063.518173][T17383] kmem_cache_alloc+0x44/0x200 [ 2063.522774][T17383] vm_area_dup+0x26/0x230 [ 2063.526939][T17383] copy_mm+0x9a1/0x13e0 [ 2063.530936][T17383] ? copy_signal+0x610/0x610 [ 2063.535357][T17383] ? __init_rwsem+0xd6/0x1c0 [ 2063.539786][T17383] ? copy_signal+0x4e3/0x610 [ 2063.544212][T17383] copy_process+0x1149/0x3290 [ 2063.548727][T17383] ? proc_fail_nth_write+0x20b/0x290 [ 2063.553847][T17383] ? fsnotify_perm+0x6a/0x5d0 [ 2063.558360][T17383] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2063.563304][T17383] ? vfs_write+0x9ec/0x1110 [ 2063.567651][T17383] kernel_clone+0x21e/0x9e0 [ 2063.571985][T17383] ? file_end_write+0x1c0/0x1c0 [ 2063.576672][T17383] ? create_io_thread+0x1e0/0x1e0 [ 2063.581533][T17383] ? mutex_unlock+0xb2/0x260 [ 2063.585958][T17383] ? __mutex_lock_slowpath+0x10/0x10 [ 2063.591083][T17383] __x64_sys_clone+0x23f/0x290 [ 2063.595679][T17383] ? __do_sys_vfork+0x130/0x130 [ 2063.600366][T17383] ? ksys_write+0x260/0x2c0 [ 2063.604708][T17383] ? debug_smp_processor_id+0x17/0x20 [ 2063.609913][T17383] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2063.615814][T17383] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2063.621283][T17383] do_syscall_64+0x3d/0xb0 [ 2063.625537][T17383] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2063.631275][T17383] RIP: 0033:0x7f3c5e561da9 [ 2063.635520][T17383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2063.655568][T17383] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2063.663811][T17383] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2063.671622][T17383] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 61) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:31 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00'}) 05:20:31 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) r5 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x40, 0x7f, 0xd9, 0x2, 0x0, 0x800, 0xb4181, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0xa452d8e29a95bfcd}, 0x10, 0x9d2, 0x4, 0x9, 0x0, 0x7, 0x6, 0x0, 0x7954, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xf, r5, 0xb) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x45, 0x3, 0x7f, 0xdf, 0x0, 0x9, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff5f1d, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x7221, 0x5, 0x4, 0x8, 0x4, 0xab, 0x800, 0x0, 0x8000, 0x0, 0x4b}, r1, 0x10, r0, 0x0) [ 2063.679433][T17383] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2063.687245][T17383] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2063.695056][T17383] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2063.702875][T17383] 05:20:31 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00'}) 05:20:31 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="00e7063ae3db6ada8c9762ff000000202b597675202b634dc06a98a9dd86543d000000b5a2707debbcc4d9e4d6590e18e7178f105589539595724c700ab17ec5a366486dd6ff4e3c26cfd1ce66"], 0x1a) [ 2063.754502][T17448] FAULT_INJECTION: forcing a failure. [ 2063.754502][T17448] name failslab, interval 1, probability 0, space 0, times 0 [ 2063.768274][T17448] CPU: 1 PID: 17448 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2063.778424][T17448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2063.788322][T17448] Call Trace: [ 2063.791443][T17448] [ 2063.794222][T17448] dump_stack_lvl+0x151/0x1b7 [ 2063.798735][T17448] ? io_uring_drop_tctx_refs+0x190/0x190 05:20:31 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00'}) (async) 05:20:31 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="00e7063ae3db6ada8c9762ff000000202b597675202b634dc06a98a9dd86543d000000b5a2707debbcc4d9e4d6590e18e7178f105589539595724c700ab17ec5a366486dd6ff4e3c26cfd1ce66"], 0x1a) 05:20:31 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="00e7063ae3db6ada8c9762ff000000202b597675202b634dc06a98a9dd86543d000000b5a2707debbcc4d9e4d6590e18e7178f105589539595724c700ab17ec5a366486dd6ff4e3c26cfd1ce66"], 0x1a) [ 2063.804200][T17448] ? avc_denied+0x1b0/0x1b0 [ 2063.808544][T17448] dump_stack+0x15/0x17 [ 2063.812537][T17448] should_fail+0x3c6/0x510 [ 2063.816791][T17448] __should_failslab+0xa4/0xe0 [ 2063.821387][T17448] ? vm_area_dup+0x26/0x230 [ 2063.825732][T17448] should_failslab+0x9/0x20 [ 2063.830069][T17448] slab_pre_alloc_hook+0x37/0xd0 [ 2063.834844][T17448] ? vm_area_dup+0x26/0x230 [ 2063.839178][T17448] kmem_cache_alloc+0x44/0x200 [ 2063.843781][T17448] vm_area_dup+0x26/0x230 [ 2063.847949][T17448] copy_mm+0x9a1/0x13e0 [ 2063.851942][T17448] ? copy_signal+0x610/0x610 [ 2063.856365][T17448] ? __init_rwsem+0xd6/0x1c0 [ 2063.860794][T17448] ? copy_signal+0x4e3/0x610 [ 2063.865219][T17448] copy_process+0x1149/0x3290 [ 2063.869734][T17448] ? proc_fail_nth_write+0x20b/0x290 [ 2063.874854][T17448] ? fsnotify_perm+0x6a/0x5d0 [ 2063.879366][T17448] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2063.884337][T17448] ? vfs_write+0x9ec/0x1110 [ 2063.888653][T17448] kernel_clone+0x21e/0x9e0 [ 2063.892993][T17448] ? file_end_write+0x1c0/0x1c0 [ 2063.897675][T17448] ? create_io_thread+0x1e0/0x1e0 [ 2063.902534][T17448] ? mutex_unlock+0xb2/0x260 [ 2063.906963][T17448] ? __mutex_lock_slowpath+0x10/0x10 [ 2063.912083][T17448] __x64_sys_clone+0x23f/0x290 [ 2063.916683][T17448] ? __do_sys_vfork+0x130/0x130 [ 2063.921368][T17448] ? ksys_write+0x260/0x2c0 [ 2063.925711][T17448] ? debug_smp_processor_id+0x17/0x20 [ 2063.930917][T17448] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2063.936819][T17448] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2063.942286][T17448] do_syscall_64+0x3d/0xb0 [ 2063.946542][T17448] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2063.952266][T17448] RIP: 0033:0x7f3c5e561da9 [ 2063.956522][T17448] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2063.975962][T17448] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2063.984209][T17448] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2063.992019][T17448] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2358], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x4002, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf55d01000048416f5dd3e3ece03c565976981890144fb251c21ed50a8acf7ea3fb2ce01b45c7b8e4d4", 0x4d}, {&(0x7f0000001640)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389525d4ed288569a24246638acd0d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda1b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a25be177a", 0x9e}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES16, @ANYRES16=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, 0x0) r6 = gettid() r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001340)=""/74, 0x4a}, {0x0}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) sendmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="733d109fa07de36a0a3da7b7d00178b5c68495313dc7274e1287f66b86aeb96e8f7640ab797d516cd67e51acc0694d43f8f19755c9ebebb3221d69cfd1c5efa4f9867a42bdd7b932ebe07158bf242ba808c0ccaf8eba5aa6a49de335381f", 0x5e}, {&(0x7f0000000440)="a06a834d5cd9b84dd504a7a4f79804f66262393452b200c05af4db7f6b66a8aae0c630d8297fa2902c9c09dd854a8e6539d4e132ee10385fd4c534492319d6eb9a24b3d48f69497ab745fd19bda68be714fc5a0b8fe4ec14206cb35e0f0df78f3b1f229eeb0eeef010cae0c25d92c6b7c552ddf442e8906b7500b1", 0x7b}, {&(0x7f0000000200)="10", 0x1}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x20, 0x5}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001e40)="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", 0x1000}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r8}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x4044080}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x6, [@union={0xd, 0x4, 0x0, 0x5, 0x1, 0xbedc, [{0xf, 0x2, 0xa38}, {0x5, 0x0, 0xdf}, {0xd, 0x4, 0x9}, {0xc, 0x2, 0x7}]}, @datasec={0x3, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x10000, 0x7}, {0x4, 0x3, 0x8}, {0x1, 0x200, 0xfd1}, {0x1, 0x5, 0x1f}, {0x4, 0x5, 0xfffe0000}, {0x1, 0x80000000, 0x5}], "f2"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000980)=""/208, 0xca, 0xd0, 0x1, 0x4}, 0x20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="fb1de86c723064", 0x7}, {&(0x7f0000000100)="d9b59d683296c8cc99ac02374625dea95e5bcb86348135110ec7c392c2b03f2c", 0x20}, {&(0x7f0000000440)="678c8474816cbcb506e0579701d3e7ef141d829b7811b98c8993dc67314a815a3caf81cbaff18a4547a92dd253c0345f4e610dd8d7198700a2610c9e9b6e5c797895da969df2bd83f69ed6526bff87f47af1a32306c025203388c4472a3c2db6fdf433954dc49824ef1dc0e0ffc44191fa84d63bc78be2ff96b48dc2124d8c13627d3f78c27a508bf684ad56231f4a927f9523bdfc03dd19c65f", 0x9a}, {&(0x7f0000000500)="7dc28fb8991e1afd613030b7312a59e116be98f0912f00b58a294da7c8a649202bc7deb3ca712d84d46613440d57225e195f94d6482ad778b96f2ae2f0abb563b41a6c5c675d941354ee450cd0db382f563736cfdbde70e30be2b0e679d7e2dd8b57e3aedddd4841c029a57ef7356701f47318c36528164ad01d58a5d533bef08b47ba807a79e0abad4c429fb437a80ab9c5ce82283128867960df8652ecb3b11d8f20827dbcf18e639223380f4fe219a8d904441da653f88aa1b9d6208c6f5c4c6e16e21977689b6e94ffbc92ce4e54c9c4a9a6c09e798d7c9e30820f6002de9303e3be86cb7b", 0xe7}, {&(0x7f0000000600)="15e7a56f56e2b06a0c2d34b72ae0112a3f4b62555adc96723fb00a784dfb3f79c4fc783e812edf5245c9ed99c4ab8b60e61d55e7bfaeaeb763a24c066295414e62f19470e9bb7d6a936649d342e5079319ce1e779cde6eae85f4be512d14db3fd768c32f88d764fc63f80ae0e835d53d26cc75eefb82a6e0fc45de7527fc197e1365dcf8ffd6dac6f23da42867aa6d45b554bb8ad98f116bcaef241fa1650a2aeef5fd006dd21a63c24c887697c9171f7da6e0225781c0562d0019f1fec1337c9826ac3196120de8155404b3cdff552724e6e94e7b77684241", 0xd9}, {&(0x7f0000000700)="28c0b43fa7992db88e42443b833464b5f07955fb1d9398f90099d5240158288b4d6a18c1e5dab0e1b3c213f25144cb5ea39401aa7b76f4440bc53f2ae2a108cb541d9e9521dd21b4c15a638bed31532d7e0e215fac4dc1bf69bd5c964f3afd82e78944b05004dd35e783f040b1e77888ceee7841e4167e5682374791cc11a5c196bd3692899e7c749abc29002e1b177b4d31", 0x92}, {&(0x7f0000000140)="36b71d1605", 0x5}, {&(0x7f00000007c0)="fc1724dd496605f458f7cecf11403fd18e74de2bb1256725db0b25192b9eb87abdafd2ad3b118089c2acdee8f2eea5411319fc985ad4350cdea1b26422ed87c02aaa1c89ebb75d2c4d811851adb8f72608df89d409a4e36212fd8e0e226af197f3324cf48e29fba61b1b50506fea8006a6badfdcf8de0de57dcdeba81a8afebcfeae45609dc5979bd2ca4104ba5ea3a6298a5112c7cbf74838c76493d1523375cf01bced072625e28ac6d65eb39e436f00485bc3df", 0xb5}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r9, r2, r3, r10]}}], 0xd8, 0x8000}, 0x41) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) socketpair(0x0, 0x2, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x21, 0x0, 0x0, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) 05:20:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'cpu'}, {0x2d, 'rlimit'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2d, 'devices'}]}, 0x29) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 2063.999829][T17448] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2064.007641][T17448] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2064.015470][T17448] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2064.023270][T17448] 05:20:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 62) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:31 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='tasks\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001280)='memory.events\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1e, 0x0, 0xffff, 0x81, 0x11, r5, 0x6, '\x00', 0x0, r4, 0x3, 0x2}, 0x48) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x80, 0x5, 0x7f, 0x1f, 0x0, 0x6, 0x20010, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbe, 0x0, @perf_config_ext={0x7, 0x27c}, 0x100082, 0x4, 0x43, 0x2, 0x8000, 0x81, 0x8000, 0x0, 0x1}, r2, 0x7, r4, 0x1) 05:20:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'cpu'}, {0x2d, 'rlimit'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2d, 'devices'}]}, 0x29) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 05:20:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x0, 'cpu'}, {0x2d, 'rlimit'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2d, 'devices'}]}, 0x29) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 2064.094944][T17630] FAULT_INJECTION: forcing a failure. [ 2064.094944][T17630] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.116626][T17630] CPU: 1 PID: 17630 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2064.126785][T17630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2064.136680][T17630] Call Trace: [ 2064.139804][T17630] [ 2064.142581][T17630] dump_stack_lvl+0x151/0x1b7 [ 2064.147097][T17630] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2064.152565][T17630] dump_stack+0x15/0x17 [ 2064.156555][T17630] should_fail+0x3c6/0x510 [ 2064.160810][T17630] __should_failslab+0xa4/0xe0 [ 2064.165408][T17630] ? anon_vma_clone+0x9a/0x500 [ 2064.170005][T17630] should_failslab+0x9/0x20 [ 2064.174343][T17630] slab_pre_alloc_hook+0x37/0xd0 [ 2064.179119][T17630] ? anon_vma_clone+0x9a/0x500 [ 2064.183719][T17630] kmem_cache_alloc+0x44/0x200 [ 2064.188320][T17630] anon_vma_clone+0x9a/0x500 [ 2064.192744][T17630] anon_vma_fork+0x91/0x4e0 [ 2064.197084][T17630] ? anon_vma_name+0x43/0x70 [ 2064.201511][T17630] ? vm_area_dup+0x17a/0x230 [ 2064.205936][T17630] copy_mm+0xa3a/0x13e0 [ 2064.209934][T17630] ? copy_signal+0x610/0x610 [ 2064.214355][T17630] ? __init_rwsem+0xd6/0x1c0 [ 2064.218789][T17630] ? copy_signal+0x4e3/0x610 [ 2064.223208][T17630] copy_process+0x1149/0x3290 [ 2064.227726][T17630] ? proc_fail_nth_write+0x20b/0x290 [ 2064.232844][T17630] ? fsnotify_perm+0x6a/0x5d0 [ 2064.237357][T17630] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2064.242301][T17630] ? vfs_write+0x9ec/0x1110 [ 2064.246653][T17630] kernel_clone+0x21e/0x9e0 [ 2064.250982][T17630] ? file_end_write+0x1c0/0x1c0 [ 2064.255668][T17630] ? create_io_thread+0x1e0/0x1e0 [ 2064.260529][T17630] ? mutex_unlock+0xb2/0x260 [ 2064.264956][T17630] ? __mutex_lock_slowpath+0x10/0x10 [ 2064.270077][T17630] __x64_sys_clone+0x23f/0x290 [ 2064.274677][T17630] ? __do_sys_vfork+0x130/0x130 [ 2064.279363][T17630] ? ksys_write+0x260/0x2c0 [ 2064.283706][T17630] ? debug_smp_processor_id+0x17/0x20 [ 2064.288910][T17630] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2064.294813][T17630] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2064.300285][T17630] do_syscall_64+0x3d/0xb0 [ 2064.304536][T17630] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2064.310262][T17630] RIP: 0033:0x7f3c5e561da9 [ 2064.314516][T17630] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2064.333957][T17630] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:20:32 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2064.342202][T17630] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2064.350014][T17630] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2064.357826][T17630] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2064.365637][T17630] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2064.373448][T17630] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2064.381279][T17630] 05:20:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0xff, 0x80, 0x2, 0x0, 0x0, 0x92fc, 0x40010, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0xff}, 0x10004, 0x3, 0x8, 0xfb9a6e774f13b3b5, 0x80000001, 0x2, 0x6, 0x0, 0x5, 0x0, 0x2e8}, 0xffffffffffffffff, 0x5, r0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:32 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='tasks\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001280)='memory.events\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1e, 0x0, 0xffff, 0x81, 0x11, r5, 0x6, '\x00', 0x0, r4, 0x3, 0x2}, 0x48) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x80, 0x5, 0x7f, 0x1f, 0x0, 0x6, 0x20010, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbe, 0x0, @perf_config_ext={0x7, 0x27c}, 0x100082, 0x4, 0x43, 0x2, 0x8000, 0x81, 0x8000, 0x0, 0x1}, r2, 0x7, r4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='tasks\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001280)='memory.events\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1e, 0x0, 0xffff, 0x81, 0x11, r5, 0x6, '\x00', 0x0, r4, 0x3, 0x2}, 0x48) (async) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x80, 0x5, 0x7f, 0x1f, 0x0, 0x6, 0x20010, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbe, 0x0, @perf_config_ext={0x7, 0x27c}, 0x100082, 0x4, 0x43, 0x2, 0x8000, 0x81, 0x8000, 0x0, 0x1}, r2, 0x7, r4, 0x1) (async) 05:20:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 63) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0xff, 0x80, 0x2, 0x0, 0x0, 0x92fc, 0x40010, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0xff}, 0x10004, 0x3, 0x8, 0xfb9a6e774f13b3b5, 0x80000001, 0x2, 0x6, 0x0, 0x5, 0x0, 0x2e8}, 0xffffffffffffffff, 0x5, r0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0xff, 0x80, 0x2, 0x0, 0x0, 0x92fc, 0x40010, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0xff}, 0x10004, 0x3, 0x8, 0xfb9a6e774f13b3b5, 0x80000001, 0x2, 0x6, 0x0, 0x5, 0x0, 0x2e8}, 0xffffffffffffffff, 0x5, r0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) [ 2064.492645][T17652] FAULT_INJECTION: forcing a failure. [ 2064.492645][T17652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2064.518975][T17652] CPU: 0 PID: 17652 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2064.529135][T17652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2064.539029][T17652] Call Trace: [ 2064.542159][T17652] [ 2064.544930][T17652] dump_stack_lvl+0x151/0x1b7 [ 2064.549447][T17652] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2064.554909][T17652] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 2064.560378][T17652] dump_stack+0x15/0x17 [ 2064.564369][T17652] should_fail+0x3c6/0x510 [ 2064.568631][T17652] should_fail_alloc_page+0x5a/0x80 [ 2064.573657][T17652] prepare_alloc_pages+0x15c/0x700 [ 2064.578605][T17652] ? __alloc_pages_bulk+0xe40/0xe40 [ 2064.583637][T17652] ? sched_clock+0x9/0x10 [ 2064.587803][T17652] ? native_set_ldt+0x360/0x360 [ 2064.592492][T17652] __alloc_pages+0x18c/0x8f0 [ 2064.596917][T17652] ? _raw_spin_unlock+0x4d/0x70 [ 2064.601622][T17652] ? prep_new_page+0x110/0x110 [ 2064.606208][T17652] pte_alloc_one+0x73/0x1b0 [ 2064.610547][T17652] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2064.615580][T17652] ? preempt_schedule+0xd9/0xe0 [ 2064.620265][T17652] ? preempt_schedule_common+0xbe/0xf0 [ 2064.625560][T17652] __pte_alloc+0x86/0x350 [ 2064.629727][T17652] ? free_pgtables+0x280/0x280 [ 2064.634324][T17652] ? _raw_spin_lock+0xa4/0x1b0 [ 2064.638936][T17652] ? __kasan_check_write+0x14/0x20 [ 2064.643873][T17652] copy_page_range+0x28a8/0x2f90 [ 2064.648657][T17652] ? __kasan_slab_alloc+0xb1/0xe0 [ 2064.653514][T17652] ? pfn_valid+0x1e0/0x1e0 [ 2064.657761][T17652] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 2064.664012][T17652] copy_mm+0xc7e/0x13e0 [ 2064.668006][T17652] ? copy_signal+0x610/0x610 [ 2064.672427][T17652] ? __init_rwsem+0xd6/0x1c0 [ 2064.676856][T17652] ? copy_signal+0x4e3/0x610 [ 2064.681280][T17652] copy_process+0x1149/0x3290 [ 2064.685795][T17652] ? proc_fail_nth_write+0x20b/0x290 [ 2064.690916][T17652] ? fsnotify_perm+0x6a/0x5d0 [ 2064.695430][T17652] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2064.700375][T17652] ? vfs_write+0x9ec/0x1110 [ 2064.704715][T17652] kernel_clone+0x21e/0x9e0 [ 2064.709054][T17652] ? file_end_write+0x1c0/0x1c0 [ 2064.713743][T17652] ? create_io_thread+0x1e0/0x1e0 [ 2064.718600][T17652] ? mutex_unlock+0xb2/0x260 [ 2064.723030][T17652] ? __mutex_lock_slowpath+0x10/0x10 [ 2064.728150][T17652] __x64_sys_clone+0x23f/0x290 [ 2064.732762][T17652] ? __do_sys_vfork+0x130/0x130 [ 2064.737435][T17652] ? ksys_write+0x260/0x2c0 [ 2064.741783][T17652] ? debug_smp_processor_id+0x17/0x20 [ 2064.746985][T17652] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2064.752888][T17652] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2064.758356][T17652] do_syscall_64+0x3d/0xb0 [ 2064.762617][T17652] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2064.768342][T17652] RIP: 0033:0x7f3c5e561da9 [ 2064.772589][T17652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2064.792028][T17652] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2064.800275][T17652] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2064.808085][T17652] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2064.815895][T17652] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2064.823707][T17652] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2064.831521][T17652] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2064.839336][T17652] 05:20:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0xff, 0x80, 0x2, 0x0, 0x0, 0x92fc, 0x40010, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0xff}, 0x10004, 0x3, 0x8, 0xfb9a6e774f13b3b5, 0x80000001, 0x2, 0x6, 0x0, 0x5, 0x0, 0x2e8}, 0xffffffffffffffff, 0x5, r0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0xff, 0x80, 0x2, 0x0, 0x0, 0x92fc, 0x40010, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0xff}, 0x10004, 0x3, 0x8, 0xfb9a6e774f13b3b5, 0x80000001, 0x2, 0x6, 0x0, 0x5, 0x0, 0x2e8}, 0xffffffffffffffff, 0x5, r0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) 05:20:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 64) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:32 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='tasks\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001280)='memory.events\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1e, 0x0, 0xffff, 0x81, 0x11, r5, 0x6, '\x00', 0x0, r4, 0x3, 0x2}, 0x48) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x80, 0x5, 0x7f, 0x1f, 0x0, 0x6, 0x20010, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbe, 0x0, @perf_config_ext={0x7, 0x27c}, 0x100082, 0x4, 0x43, 0x2, 0x8000, 0x81, 0x8000, 0x0, 0x1}, r2, 0x7, r4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='tasks\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001280)='memory.events\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1e, 0x0, 0xffff, 0x81, 0x11, r5, 0x6, '\x00', 0x0, r4, 0x3, 0x2}, 0x48) (async) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x80, 0x5, 0x7f, 0x1f, 0x0, 0x6, 0x20010, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbe, 0x0, @perf_config_ext={0x7, 0x27c}, 0x100082, 0x4, 0x43, 0x2, 0x8000, 0x81, 0x8000, 0x0, 0x1}, r2, 0x7, r4, 0x1) (async) 05:20:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00696fe1867f0d75202d626c6b696f202b637075202b63707520"], 0x1a) [ 2064.909660][T17765] FAULT_INJECTION: forcing a failure. [ 2064.909660][T17765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2064.940012][T17765] CPU: 0 PID: 17765 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2064.950175][T17765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2064.960069][T17765] Call Trace: [ 2064.963193][T17765] [ 2064.965969][T17765] dump_stack_lvl+0x151/0x1b7 [ 2064.970483][T17765] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2064.975952][T17765] dump_stack+0x15/0x17 [ 2064.979943][T17765] should_fail+0x3c6/0x510 [ 2064.984201][T17765] should_fail_alloc_page+0x5a/0x80 [ 2064.989264][T17765] prepare_alloc_pages+0x15c/0x700 [ 2064.994318][T17765] ? __alloc_pages+0x8f0/0x8f0 [ 2064.998921][T17765] ? __alloc_pages_bulk+0xe40/0xe40 [ 2065.003957][T17765] __alloc_pages+0x18c/0x8f0 [ 2065.008382][T17765] ? prep_new_page+0x110/0x110 [ 2065.012984][T17765] ? 0xffffffffa00022ac [ 2065.016969][T17765] ? is_bpf_text_address+0x172/0x190 [ 2065.022092][T17765] pte_alloc_one+0x73/0x1b0 [ 2065.026432][T17765] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2065.031464][T17765] ? arch_stack_walk+0xf3/0x140 [ 2065.036154][T17765] __pte_alloc+0x86/0x350 [ 2065.040317][T17765] ? free_pgtables+0x280/0x280 [ 2065.044918][T17765] ? _raw_spin_lock+0xa4/0x1b0 [ 2065.049520][T17765] ? __kasan_check_write+0x14/0x20 [ 2065.054468][T17765] copy_page_range+0x28a8/0x2f90 [ 2065.059239][T17765] ? __kasan_slab_alloc+0xb1/0xe0 [ 2065.064116][T17765] ? pfn_valid+0x1e0/0x1e0 [ 2065.068358][T17765] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2065.073909][T17765] ? __rb_insert_augmented+0x5de/0x610 [ 2065.079208][T17765] copy_mm+0xc7e/0x13e0 [ 2065.083197][T17765] ? copy_signal+0x610/0x610 [ 2065.087624][T17765] ? __init_rwsem+0xd6/0x1c0 [ 2065.092046][T17765] ? copy_signal+0x4e3/0x610 [ 2065.096476][T17765] copy_process+0x1149/0x3290 [ 2065.100988][T17765] ? proc_fail_nth_write+0x20b/0x290 [ 2065.106110][T17765] ? fsnotify_perm+0x6a/0x5d0 [ 2065.110623][T17765] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2065.115571][T17765] ? vfs_write+0x9ec/0x1110 [ 2065.119908][T17765] kernel_clone+0x21e/0x9e0 [ 2065.124250][T17765] ? file_end_write+0x1c0/0x1c0 [ 2065.128935][T17765] ? create_io_thread+0x1e0/0x1e0 [ 2065.133794][T17765] ? mutex_unlock+0xb2/0x260 [ 2065.138221][T17765] ? __mutex_lock_slowpath+0x10/0x10 [ 2065.143343][T17765] __x64_sys_clone+0x23f/0x290 [ 2065.147942][T17765] ? __do_sys_vfork+0x130/0x130 [ 2065.152628][T17765] ? ksys_write+0x260/0x2c0 [ 2065.156973][T17765] ? debug_smp_processor_id+0x17/0x20 [ 2065.162175][T17765] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2065.168077][T17765] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2065.173554][T17765] do_syscall_64+0x3d/0xb0 [ 2065.177801][T17765] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2065.183543][T17765] RIP: 0033:0x7f3c5e561da9 [ 2065.187779][T17765] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:20:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) socketpair(0x22, 0x1, 0xfffffa57, &(0x7f0000000180)) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r3 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r3, 0x12) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, r5}, 0x90) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x5d, 0xfc, 0x8, 0x0, 0x401, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x1ff}, 0x400, 0x834, 0x7fffffff, 0x4, 0x1, 0x10000, 0xf651, 0x0, 0x2, 0x0, 0x100}, 0xffffffffffffffff, 0xd, r7, 0x0) 05:20:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00696fe1867f0d75202d626c6b696f202b637075202b63707520"], 0x1a) 05:20:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00696fe1867f0d75202d626c6b696f202b637075202b63707520"], 0x1a) [ 2065.207222][T17765] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2065.215467][T17765] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2065.223280][T17765] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2065.231090][T17765] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2065.238903][T17765] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2065.246712][T17765] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2065.254531][T17765] 05:20:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 65) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:33 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2065.319571][T17889] FAULT_INJECTION: forcing a failure. [ 2065.319571][T17889] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.335443][T17889] CPU: 0 PID: 17889 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2065.345602][T17889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2065.355499][T17889] Call Trace: [ 2065.358623][T17889] [ 2065.361403][T17889] dump_stack_lvl+0x151/0x1b7 [ 2065.365912][T17889] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2065.371383][T17889] dump_stack+0x15/0x17 [ 2065.375371][T17889] should_fail+0x3c6/0x510 [ 2065.379627][T17889] __should_failslab+0xa4/0xe0 [ 2065.384225][T17889] ? anon_vma_fork+0x1df/0x4e0 [ 2065.388821][T17889] should_failslab+0x9/0x20 [ 2065.393158][T17889] slab_pre_alloc_hook+0x37/0xd0 [ 2065.397932][T17889] ? anon_vma_fork+0x1df/0x4e0 [ 2065.402533][T17889] kmem_cache_alloc+0x44/0x200 [ 2065.407134][T17889] anon_vma_fork+0x1df/0x4e0 [ 2065.411648][T17889] copy_mm+0xa3a/0x13e0 [ 2065.415641][T17889] ? copy_signal+0x610/0x610 [ 2065.420065][T17889] ? __init_rwsem+0xd6/0x1c0 [ 2065.424492][T17889] ? copy_signal+0x4e3/0x610 [ 2065.428917][T17889] copy_process+0x1149/0x3290 [ 2065.433435][T17889] ? proc_fail_nth_write+0x20b/0x290 [ 2065.438558][T17889] ? fsnotify_perm+0x6a/0x5d0 [ 2065.443066][T17889] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2065.448012][T17889] ? vfs_write+0x9ec/0x1110 [ 2065.452353][T17889] kernel_clone+0x21e/0x9e0 [ 2065.456691][T17889] ? file_end_write+0x1c0/0x1c0 [ 2065.461399][T17889] ? create_io_thread+0x1e0/0x1e0 [ 2065.466240][T17889] ? mutex_unlock+0xb2/0x260 [ 2065.470670][T17889] ? __mutex_lock_slowpath+0x10/0x10 [ 2065.475875][T17889] __x64_sys_clone+0x23f/0x290 [ 2065.480475][T17889] ? __do_sys_vfork+0x130/0x130 [ 2065.485159][T17889] ? ksys_write+0x260/0x2c0 [ 2065.489504][T17889] ? debug_smp_processor_id+0x17/0x20 [ 2065.494705][T17889] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2065.500609][T17889] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2065.506076][T17889] do_syscall_64+0x3d/0xb0 [ 2065.510331][T17889] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2065.516058][T17889] RIP: 0033:0x7f3c5e561da9 [ 2065.520325][T17889] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2065.539752][T17889] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2065.547996][T17889] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2065.555807][T17889] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 05:20:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) 05:20:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) socketpair(0x22, 0x1, 0xfffffa57, &(0x7f0000000180)) (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) r3 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r3, 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, r5}, 0x90) (async) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x5d, 0xfc, 0x8, 0x0, 0x401, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x1ff}, 0x400, 0x834, 0x7fffffff, 0x4, 0x1, 0x10000, 0xf651, 0x0, 0x2, 0x0, 0x100}, 0xffffffffffffffff, 0xd, r7, 0x0) [ 2065.563623][T17889] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2065.571433][T17889] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2065.579244][T17889] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2065.587059][T17889] [ 2065.598159][T17889] ------------[ cut here ]------------ 05:20:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) [ 2065.629392][T17889] refcount_t: underflow; use-after-free. [ 2065.635041][T17889] WARNING: CPU: 0 PID: 17889 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 2065.646476][T17889] Modules linked in: [ 2065.650316][T17889] CPU: 0 PID: 17889 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2065.666837][T17889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 05:20:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) socketpair(0x22, 0x1, 0xfffffa57, &(0x7f0000000180)) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) r3 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r3, 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, r5}, 0x90) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x5d, 0xfc, 0x8, 0x0, 0x401, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x1ff}, 0x400, 0x834, 0x7fffffff, 0x4, 0x1, 0x10000, 0xf651, 0x0, 0x2, 0x0, 0x100}, 0xffffffffffffffff, 0xd, r7, 0x0) 05:20:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) [ 2065.676963][T17889] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 2065.683402][T17889] Code: 04 01 48 c7 c7 40 c8 82 85 e8 e4 9e dc fe 0f 0b eb 8b e8 6b 49 0b ff c6 05 73 8e 9e 04 01 48 c7 c7 a0 c8 82 85 e8 c8 9e dc fe <0f> 0b e9 6c ff ff ff e8 4c 49 0b ff c6 05 55 8e 9e 04 01 48 c7 c7 [ 2065.711284][T17889] RSP: 0018:ffffc90001807968 EFLAGS: 00010246 [ 2065.721724][T17889] RAX: 81da39bc17e46c00 RBX: 0000000000000003 RCX: 0000000000040000 05:20:33 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x6, 0x81, 0x2, 0x0, 0xffff, 0x8800, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3ff, 0x4}, 0x100800, 0x9dc, 0x1, 0x7, 0x1, 0x2312, 0x0, 0x0, 0x25e, 0x0, 0x20000000b210}, r1, 0xf, r0, 0x7) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x5f1}, 0x0, 0x0, 0x0, 0x5963f2b9346ccd78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75a}, 0x0, 0x4, 0xffffffffffffffff, 0x6) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 05:20:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2065.735284][T17889] RDX: ffffc90011ce2000 RSI: 0000000000019177 RDI: 0000000000019178 [ 2065.753838][T17889] RBP: ffffc90001807978 R08: ffffffff81575f25 R09: ffffed103ee04e93 [ 2065.772670][T17889] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110383bec39 05:20:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2065.788942][T17889] R13: ffff8881c1df61c8 R14: 0000000000000003 R15: ffff888181e9e180 [ 2065.814212][T17889] FS: 00007f3c5d2e36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2065.827025][T17889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 05:20:33 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x6, 0x81, 0x2, 0x0, 0xffff, 0x8800, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3ff, 0x4}, 0x100800, 0x9dc, 0x1, 0x7, 0x1, 0x2312, 0x0, 0x0, 0x25e, 0x0, 0x20000000b210}, r1, 0xf, r0, 0x7) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x5f1}, 0x0, 0x0, 0x0, 0x5963f2b9346ccd78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75a}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 05:20:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (rerun: 32) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2065.834698][T17889] CR2: 00007f2b58676d00 CR3: 000000018cbb6000 CR4: 00000000003506b0 [ 2065.845930][T17889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2065.854287][T17889] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2065.876664][T17889] Call Trace: [ 2065.882173][T17889] [ 2065.888368][T17889] ? show_regs+0x58/0x60 [ 2065.896826][T17889] ? __warn+0x160/0x2f0 [ 2065.905719][T17889] ? refcount_warn_saturate+0x158/0x1a0 [ 2065.916628][T17889] ? report_bug+0x3d9/0x5b0 [ 2065.924945][T17889] ? refcount_warn_saturate+0x158/0x1a0 [ 2065.931467][T17889] ? handle_bug+0x41/0x70 05:20:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000180), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0x9, 0x0, 0xe, 0x0, 0x2, 0x4000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000280), 0xa}, 0x4008, 0x6, 0xffd, 0x5, 0xfffffffffffffffb, 0x5, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xe, r0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x1, 0x7f, 0xa0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x5, @perf_config_ext={0x7, 0xe8f9}, 0xc010, 0x4, 0x6, 0x8, 0xe93e, 0x3, 0x18da, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xa, r3, 0x8) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00io -cpu -perfJ +cpu \x00'/31], 0x1f) [ 2065.941334][T17889] ? exc_invalid_op+0x1b/0x50 [ 2065.952031][T17889] ? asm_exc_invalid_op+0x1b/0x20 [ 2065.960268][T17889] ? __wake_up_klogd+0xd5/0x110 [ 2065.968296][T17889] ? refcount_warn_saturate+0x158/0x1a0 [ 2065.978878][T17889] ? refcount_warn_saturate+0x158/0x1a0 [ 2065.985839][T17889] vm_area_free_no_check+0x123/0x130 05:20:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000180), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20) (async) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0x9, 0x0, 0xe, 0x0, 0x2, 0x4000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000280), 0xa}, 0x4008, 0x6, 0xffd, 0x5, 0xfffffffffffffffb, 0x5, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xe, r0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x1, 0x7f, 0xa0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x5, @perf_config_ext={0x7, 0xe8f9}, 0xc010, 0x4, 0x6, 0x8, 0xe93e, 0x3, 0x18da, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xa, r3, 0x8) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00io -cpu -perfJ +cpu \x00'/31], 0x1f) [ 2065.991857][T17889] copy_mm+0xefb/0x13e0 [ 2065.996006][T17889] ? copy_signal+0x610/0x610 [ 2066.010454][T17889] ? __init_rwsem+0xd6/0x1c0 [ 2066.015244][T17889] ? copy_signal+0x4e3/0x610 [ 2066.022743][T17889] copy_process+0x1149/0x3290 [ 2066.029406][T17889] ? proc_fail_nth_write+0x20b/0x290 [ 2066.034576][T17889] ? fsnotify_perm+0x6a/0x5d0 [ 2066.039064][T17889] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2066.044089][T17889] ? vfs_write+0x9ec/0x1110 [ 2066.048618][T17889] kernel_clone+0x21e/0x9e0 [ 2066.053203][T17889] ? file_end_write+0x1c0/0x1c0 [ 2066.057931][T17889] ? create_io_thread+0x1e0/0x1e0 [ 2066.062854][T17889] ? mutex_unlock+0xb2/0x260 [ 2066.080308][T17889] ? __mutex_lock_slowpath+0x10/0x10 [ 2066.085740][T17889] __x64_sys_clone+0x23f/0x290 [ 2066.097665][T17889] ? __do_sys_vfork+0x130/0x130 [ 2066.102448][T17889] ? ksys_write+0x260/0x2c0 [ 2066.111478][T17889] ? debug_smp_processor_id+0x17/0x20 [ 2066.118845][T17889] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2066.124934][T17889] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2066.131088][T17889] do_syscall_64+0x3d/0xb0 [ 2066.140056][T17889] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2066.145914][T17889] RIP: 0033:0x7f3c5e561da9 [ 2066.150266][T17889] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2066.173607][T17889] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2066.190453][T17889] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2066.214659][T17889] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2066.222991][T17889] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2066.231074][T17889] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2066.238972][T17889] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 05:20:34 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000180), 0x12) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0x9, 0x0, 0xe, 0x0, 0x2, 0x4000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000280), 0xa}, 0x4008, 0x6, 0xffd, 0x5, 0xfffffffffffffffb, 0x5, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xe, r0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x1, 0x7f, 0xa0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x5, @perf_config_ext={0x7, 0xe8f9}, 0xc010, 0x4, 0x6, 0x8, 0xe93e, 0x3, 0x18da, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xa, r3, 0x8) (async, rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00io -cpu -perfJ +cpu \x00'/31], 0x1f) (rerun: 64) 05:20:34 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2066.246795][T17889] [ 2066.249599][T17889] ---[ end trace 4b692827a8bbabb8 ]--- [ 2066.309521][T21484] ================================================================== [ 2066.317409][T21484] BUG: KASAN: use-after-free in vma_interval_tree_augment_rotate+0xab/0x1d0 [ 2066.325912][T21484] Read of size 8 at addr ffff8881bfffffb0 by task syz-executor.3/21484 [ 2066.333986][T21484] [ 2066.336159][T21484] CPU: 1 PID: 21484 Comm: syz-executor.3 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2066.347701][T21484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2066.357594][T21484] Call Trace: [ 2066.360721][T21484] [ 2066.363497][T21484] dump_stack_lvl+0x151/0x1b7 [ 2066.368014][T21484] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2066.373479][T21484] ? panic+0x751/0x751 [ 2066.377385][T21484] print_address_description+0x87/0x3b0 [ 2066.382767][T21484] kasan_report+0x179/0x1c0 [ 2066.387105][T21484] ? vma_interval_tree_augment_rotate+0xab/0x1d0 [ 2066.393271][T21484] ? vma_interval_tree_augment_rotate+0xab/0x1d0 [ 2066.399434][T21484] __asan_report_load8_noabort+0x14/0x20 [ 2066.404902][T21484] vma_interval_tree_augment_rotate+0xab/0x1d0 [ 2066.410901][T21484] __rb_insert_augmented+0x5de/0x610 [ 2066.416008][T21484] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 2066.422261][T21484] vma_interval_tree_insert_after+0x2be/0x2d0 [ 2066.428161][T21484] copy_mm+0xba2/0x13e0 [ 2066.432156][T21484] ? copy_signal+0x610/0x610 [ 2066.436577][T21484] ? __init_rwsem+0xd6/0x1c0 [ 2066.440999][T21484] ? copy_signal+0x4e3/0x610 [ 2066.445427][T21484] copy_process+0x1149/0x3290 [ 2066.449949][T21484] ? io_schedule+0x120/0x120 [ 2066.454368][T21484] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2066.459321][T21484] kernel_clone+0x21e/0x9e0 [ 2066.463653][T21484] ? kernel_read+0x1f0/0x1f0 [ 2066.468079][T21484] ? kmem_cache_free+0x116/0x2e0 [ 2066.472855][T21484] ? create_io_thread+0x1e0/0x1e0 [ 2066.477714][T21484] ? debug_smp_processor_id+0x17/0x20 [ 2066.482924][T21484] __x64_sys_clone+0x23f/0x290 [ 2066.487524][T21484] ? __do_sys_vfork+0x130/0x130 [ 2066.492212][T21484] do_syscall_64+0x3d/0xb0 [ 2066.496462][T21484] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2066.502189][T21484] RIP: 0033:0x7f3c5e55edd3 [ 2066.506448][T21484] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 2066.525884][T21484] RSP: 002b:00007fff895414c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2066.534130][T21484] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c5e55edd3 [ 2066.541946][T21484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2066.549751][T21484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2066.557564][T21484] R10: 0000555555fea750 R11: 0000000000000246 R12: 0000000000000001 [ 2066.565376][T21484] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 2066.573190][T21484] [ 2066.576055][T21484] [ 2066.578226][T21484] The buggy address belongs to the page: [ 2066.583689][T21484] page:ffffea0006ffffc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bffff [ 2066.593755][T21484] flags: 0x4000000000000000(zone=1) [ 2066.598805][T21484] raw: 4000000000000000 ffffea0006fa4008 ffffea0006ffff88 0000000000000000 [ 2066.607216][T21484] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 2066.615626][T21484] page dumped because: kasan: bad access detected [ 2066.621880][T21484] page_owner tracks the page as freed [ 2066.627085][T21484] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x506dc0(GFP_USER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_ZERO|__GFP_ACCOUNT), pid 970, ts 797515996788, free_ts 799860935497 [ 2066.645658][T21484] post_alloc_hook+0x1a3/0x1b0 [ 2066.650263][T21484] prep_new_page+0x1b/0x110 [ 2066.654599][T21484] get_page_from_freelist+0x3550/0x35d0 [ 2066.659979][T21484] __alloc_pages+0x27e/0x8f0 [ 2066.664408][T21484] bpf_ringbuf_alloc+0xd0/0x3d0 [ 2066.669093][T21484] ringbuf_map_alloc+0x202/0x320 [ 2066.673868][T21484] map_create+0x411/0x2050 [ 2066.678121][T21484] __sys_bpf+0x296/0x760 [ 2066.682199][T21484] __x64_sys_bpf+0x7c/0x90 [ 2066.686456][T21484] do_syscall_64+0x3d/0xb0 [ 2066.690706][T21484] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2066.696434][T21484] page last free stack trace: [ 2066.700945][T21484] free_unref_page_prepare+0x7c8/0x7d0 [ 2066.706248][T21484] free_unref_page+0xe8/0x750 [ 2066.710754][T21484] __free_pages+0x61/0xf0 [ 2066.714925][T21484] ringbuf_map_free+0xbe/0x120 [ 2066.719522][T21484] bpf_map_free_deferred+0x10d/0x1e0 [ 2066.724643][T21484] process_one_work+0x6bb/0xc10 [ 2066.729330][T21484] worker_thread+0xad5/0x12a0 [ 2066.733841][T21484] kthread+0x421/0x510 [ 2066.737748][T21484] ret_from_fork+0x1f/0x30 [ 2066.742000][T21484] [ 2066.744169][T21484] Memory state around the buggy address: [ 2066.749641][T21484] ffff8881bffffe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05:20:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2358], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x4002, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf55d01000048416f5dd3e3ece03c565976981890144fb251c21ed50a8acf7ea3fb2ce01b45c7b8e4d4", 0x4d}, {&(0x7f0000001640)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389525d4ed288569a24246638acd0d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda1b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a25be177a", 0x9e}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES16, @ANYRES16=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, 0x0) gettid() (async) r6 = gettid() r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001340)=""/74, 0x4a}, {0x0}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) sendmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="733d109fa07de36a0a3da7b7d00178b5c68495313dc7274e1287f66b86aeb96e8f7640ab797d516cd67e51acc0694d43f8f19755c9ebebb3221d69cfd1c5efa4f9867a42bdd7b932ebe07158bf242ba808c0ccaf8eba5aa6a49de335381f", 0x5e}, {&(0x7f0000000440)="a06a834d5cd9b84dd504a7a4f79804f66262393452b200c05af4db7f6b66a8aae0c630d8297fa2902c9c09dd854a8e6539d4e132ee10385fd4c534492319d6eb9a24b3d48f69497ab745fd19bda68be714fc5a0b8fe4ec14206cb35e0f0df78f3b1f229eeb0eeef010cae0c25d92c6b7c552ddf442e8906b7500b1", 0x7b}, {&(0x7f0000000200)="10", 0x1}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x20, 0x5}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001e40)="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", 0x1000}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r8}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x4044080}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001e40)="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", 0x1000}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r8}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x4044080}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x6, [@union={0xd, 0x4, 0x0, 0x5, 0x1, 0xbedc, [{0xf, 0x2, 0xa38}, {0x5, 0x0, 0xdf}, {0xd, 0x4, 0x9}, {0xc, 0x2, 0x7}]}, @datasec={0x3, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x10000, 0x7}, {0x4, 0x3, 0x8}, {0x1, 0x200, 0xfd1}, {0x1, 0x5, 0x1f}, {0x4, 0x5, 0xfffe0000}, {0x1, 0x80000000, 0x5}], "f2"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000980)=""/208, 0xca, 0xd0, 0x1, 0x4}, 0x20) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x6, [@union={0xd, 0x4, 0x0, 0x5, 0x1, 0xbedc, [{0xf, 0x2, 0xa38}, {0x5, 0x0, 0xdf}, {0xd, 0x4, 0x9}, {0xc, 0x2, 0x7}]}, @datasec={0x3, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x10000, 0x7}, {0x4, 0x3, 0x8}, {0x1, 0x200, 0xfd1}, {0x1, 0x5, 0x1f}, {0x4, 0x5, 0xfffe0000}, {0x1, 0x80000000, 0x5}], "f2"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000980)=""/208, 0xca, 0xd0, 0x1, 0x4}, 0x20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="fb1de86c723064", 0x7}, {&(0x7f0000000100)="d9b59d683296c8cc99ac02374625dea95e5bcb86348135110ec7c392c2b03f2c", 0x20}, {&(0x7f0000000440)="678c8474816cbcb506e0579701d3e7ef141d829b7811b98c8993dc67314a815a3caf81cbaff18a4547a92dd253c0345f4e610dd8d7198700a2610c9e9b6e5c797895da969df2bd83f69ed6526bff87f47af1a32306c025203388c4472a3c2db6fdf433954dc49824ef1dc0e0ffc44191fa84d63bc78be2ff96b48dc2124d8c13627d3f78c27a508bf684ad56231f4a927f9523bdfc03dd19c65f", 0x9a}, {&(0x7f0000000500)="7dc28fb8991e1afd613030b7312a59e116be98f0912f00b58a294da7c8a649202bc7deb3ca712d84d46613440d57225e195f94d6482ad778b96f2ae2f0abb563b41a6c5c675d941354ee450cd0db382f563736cfdbde70e30be2b0e679d7e2dd8b57e3aedddd4841c029a57ef7356701f47318c36528164ad01d58a5d533bef08b47ba807a79e0abad4c429fb437a80ab9c5ce82283128867960df8652ecb3b11d8f20827dbcf18e639223380f4fe219a8d904441da653f88aa1b9d6208c6f5c4c6e16e21977689b6e94ffbc92ce4e54c9c4a9a6c09e798d7c9e30820f6002de9303e3be86cb7b", 0xe7}, {&(0x7f0000000600)="15e7a56f56e2b06a0c2d34b72ae0112a3f4b62555adc96723fb00a784dfb3f79c4fc783e812edf5245c9ed99c4ab8b60e61d55e7bfaeaeb763a24c066295414e62f19470e9bb7d6a936649d342e5079319ce1e779cde6eae85f4be512d14db3fd768c32f88d764fc63f80ae0e835d53d26cc75eefb82a6e0fc45de7527fc197e1365dcf8ffd6dac6f23da42867aa6d45b554bb8ad98f116bcaef241fa1650a2aeef5fd006dd21a63c24c887697c9171f7da6e0225781c0562d0019f1fec1337c9826ac3196120de8155404b3cdff552724e6e94e7b77684241", 0xd9}, {&(0x7f0000000700)="28c0b43fa7992db88e42443b833464b5f07955fb1d9398f90099d5240158288b4d6a18c1e5dab0e1b3c213f25144cb5ea39401aa7b76f4440bc53f2ae2a108cb541d9e9521dd21b4c15a638bed31532d7e0e215fac4dc1bf69bd5c964f3afd82e78944b05004dd35e783f040b1e77888ceee7841e4167e5682374791cc11a5c196bd3692899e7c749abc29002e1b177b4d31", 0x92}, {&(0x7f0000000140)="36b71d1605", 0x5}, {&(0x7f00000007c0)="fc1724dd496605f458f7cecf11403fd18e74de2bb1256725db0b25192b9eb87abdafd2ad3b118089c2acdee8f2eea5411319fc985ad4350cdea1b26422ed87c02aaa1c89ebb75d2c4d811851adb8f72608df89d409a4e36212fd8e0e226af197f3324cf48e29fba61b1b50506fea8006a6badfdcf8de0de57dcdeba81a8afebcfeae45609dc5979bd2ca4104ba5ea3a6298a5112c7cbf74838c76493d1523375cf01bced072625e28ac6d65eb39e436f00485bc3df", 0xb5}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r9, r2, r3, r10]}}], 0xd8, 0x8000}, 0x41) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) (async) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) socketpair(0x0, 0x2, 0x7, 0x0) (async) socketpair(0x0, 0x2, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x21, 0x0, 0x0, 0x0) (async) socketpair(0x21, 0x0, 0x0, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) 05:20:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 66) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2066.757542][T21484] ffff8881bfffff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2066.765442][T21484] >ffff8881bfffff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2066.773332][T21484] ^ [ 2066.778803][T21484] ffff8881c0000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2066.786701][T21484] ffff8881c0000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2066.794598][T21484] ================================================================== [ 2066.802494][T21484] Disabling lock debugging due to kernel taint [ 2066.822360][T18244] FAULT_INJECTION: forcing a failure. [ 2066.822360][T18244] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.835132][T18244] CPU: 1 PID: 18244 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2066.846667][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2066.856562][T18244] Call Trace: [ 2066.859682][T18244] [ 2066.862461][T18244] dump_stack_lvl+0x151/0x1b7 [ 2066.866976][T18244] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2066.872450][T18244] dump_stack+0x15/0x17 [ 2066.876435][T18244] should_fail+0x3c6/0x510 [ 2066.880691][T18244] __should_failslab+0xa4/0xe0 [ 2066.885290][T18244] ? vm_area_dup+0x26/0x230 [ 2066.889629][T18244] should_failslab+0x9/0x20 [ 2066.893968][T18244] slab_pre_alloc_hook+0x37/0xd0 [ 2066.898741][T18244] ? vm_area_dup+0x26/0x230 [ 2066.903083][T18244] kmem_cache_alloc+0x44/0x200 [ 2066.907687][T18244] vm_area_dup+0x26/0x230 [ 2066.911851][T18244] copy_mm+0x9a1/0x13e0 [ 2066.915845][T18244] ? copy_signal+0x610/0x610 [ 2066.920264][T18244] ? __init_rwsem+0xd6/0x1c0 [ 2066.924687][T18244] ? copy_signal+0x4e3/0x610 [ 2066.929115][T18244] copy_process+0x1149/0x3290 [ 2066.933628][T18244] ? proc_fail_nth_write+0x20b/0x290 [ 2066.938748][T18244] ? fsnotify_perm+0x6a/0x5d0 [ 2066.943262][T18244] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2066.948211][T18244] ? vfs_write+0x9ec/0x1110 [ 2066.952550][T18244] kernel_clone+0x21e/0x9e0 [ 2066.956888][T18244] ? file_end_write+0x1c0/0x1c0 [ 2066.961573][T18244] ? create_io_thread+0x1e0/0x1e0 [ 2066.966435][T18244] ? mutex_unlock+0xb2/0x260 [ 2066.970864][T18244] ? __mutex_lock_slowpath+0x10/0x10 [ 2066.975984][T18244] __x64_sys_clone+0x23f/0x290 [ 2066.980591][T18244] ? __do_sys_vfork+0x130/0x130 [ 2066.985269][T18244] ? ksys_write+0x260/0x2c0 [ 2066.989613][T18244] ? debug_smp_processor_id+0x17/0x20 [ 2066.994817][T18244] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2067.000719][T18244] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2067.006186][T18244] do_syscall_64+0x3d/0xb0 [ 2067.010440][T18244] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2067.016170][T18244] RIP: 0033:0x7f3c5e561da9 [ 2067.020423][T18244] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2067.039862][T18244] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2067.048107][T18244] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2067.055918][T18244] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2067.063730][T18244] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2358], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x4002, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x4002, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf55d01000048416f5dd3e3ece03c565976981890144fb251c21ed50a8acf7ea3fb2ce01b45c7b8e4d4", 0x4d}, {&(0x7f0000001640)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389525d4ed288569a24246638acd0d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda1b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a25be177a", 0x9e}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES16, @ANYRES16=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, 0x0) r6 = gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001340)=""/74, 0x4a}, {0x0}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x1) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001340)=""/74, 0x4a}, {0x0}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) sendmsg$unix(r7, &(0x7f0000000580)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="733d109fa07de36a0a3da7b7d00178b5c68495313dc7274e1287f66b86aeb96e8f7640ab797d516cd67e51acc0694d43f8f19755c9ebebb3221d69cfd1c5efa4f9867a42bdd7b932ebe07158bf242ba808c0ccaf8eba5aa6a49de335381f", 0x5e}, {&(0x7f0000000440)="a06a834d5cd9b84dd504a7a4f79804f66262393452b200c05af4db7f6b66a8aae0c630d8297fa2902c9c09dd854a8e6539d4e132ee10385fd4c534492319d6eb9a24b3d48f69497ab745fd19bda68be714fc5a0b8fe4ec14206cb35e0f0df78f3b1f229eeb0eeef010cae0c25d92c6b7c552ddf442e8906b7500b1", 0x7b}, {&(0x7f0000000200)="10", 0x1}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x20, 0x5}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001e40)="fbe71d6f3d8e8370282bc2b4adc49e973d083fd01c95b74523210337d4aa4865c88033b45ee38265ad26cec2a044bad281022dbc5fa8ca61d9989f0f1b15eb71b92299e567203f28de84d6264a68f1bc88ea39350945369bc418bc4d9569317c538a71b8093b95ce512b9278c717c12324237a6138790de02c58030dd0daf47a08b328862b8732f94a3f483a80d0288976cda096ea6a7c47d5855fd6d1e5b0dcf2b9c249a7f334d09cd1ac5455523d010b53af9be9da1ca73c434b01698e67884baa3063f91a94bf7a1f495f545a651d4965a86804de7b80632e2b0150264a1e11f13586ece7448a2bd3b81203a2ffd78d1b99be3a14b6d37dbeb2d5bb0784d38c03543e795cbc4b07ad8350192b0068551b0221b137972c4f069008d5ee18a317e4a740504a341f564a0a7e7db1713317d0348e19bdd01d1131836fd0fb47024822d3d7983bb6a0e5057b3b5766e01212c5ae868af9e255cc2caadc5d71ff742004b8e698fdaddcd7e361423dd8f78d94ec8f63a6bb0bca22ce2081100c40c990ed3ff5c37ea0d662b3e82700787577c1f540df2b2f9fc90424210ddb292b87d0153320de0ae52b12fcd51d37ff04802e4f0128b7bfa56a230943a0262feaad24a2ca5302e1fd6850b96e3233858938e54df371f99b7e640da1baaf1bb755491a98a3c958bc7d5fe233e30c1f2ab9a4981b75d14fe7d09e28e90d769d89202e8aa5b83cc8cd1d987d575a07a337acde2153f103f6d2ccc2ec8ba35f80f5b25915b6fe7fe00a95703941c02e057e764acfdf7113930ce589384864dff8dd268cc820e0c81abbe5b1c530b10e8940b74b740cb09f4f92a35f23839e18b86206dcfa3034eb140e6a0b818fe058a0fc083d7c60d4d47b4f42d0feda1b36ed863dc00dc7a0ed462921b9f1f090c0c6cadec1cbbea99f9e8de0796f02c3033cebe92e9a5bdaa8006b577e4eda4b6b76cde5b4720a4a3d6515a6a943ce496b87697c570b9f080a634d8df696b6810ab7e7530fd19e0303cd0fc22ac053c63e0d27ff91eb0ed41ef92c94c9a356db3b7f4441cb16bb2e8d33d50353e5420ab5f2cf07ac5d5b651dc583b76d70d43d63c8db8b2b813941a117e4755adbc959c3960bbff78852b7ea1d8a9246e136eaf8b9e513fbbebd1f025d5b8bf89e654310554f9d873c05655dfbd897115cf15a6881f8b5b3a861de1adcd18f637078056d150e13434ec94a2afb0bddaa0da6d3b843b9ca5cf7fd51e623ab3ab9111198b646b89f1f2124a0251faf6e991b095998e85eb955904255baaa174732eb746061bc0dcc27e39e9542db542ec57eea3d1a691dfefcf448e165a1e3c124aaf9b6a9dc754106b82af0e23a13f17d8da51187437ff610449a03aec66f18afc5b6379116f7b1e3fc1194c7826de625dda87ac7b6829fc1862cee004e98f699eec563b764abcb11e04adb0d981800154fbb6041b4f65035fb5e831ddc6beedb76b3746393b388afcd4c8d4483154cc5134afc8c491f43a4447cc4b1859cefa0e89be506b00f2e2e94628678bedabb6d2c8271623b0ff435a3b2d6b444cb76bffa6a67f8f2a1264059609ea6e8fa690cbaca7fa9a4c2ec35973fcc41fcc8cec936b10554adf613df12f67c32f0b91c74fad1409d34bc036efe923734310439a7e180e852760eea8175700a707590c80c629c82eaa273594133943ee4d47eb451481c03f67c70faf92d2934f5730bee42b48b5157a5e4b2be668dfe6c327de4ef58a8dbfe0e803f04d7e58849d8e72909a05677fd5bf5b97ca1a6b0335562e75527a0acb7b3a0b13a1c61d4ee6ba51645743930d9854a5f3d1b2b8741233ec244e39926e7aa304e5cd50368e76a69628491f7bd2c4be6c25a4dd1505b53453f0d19da880ab448b12fb2189bbdde1a6693f6c4d6654af1da45e9c3efba4dc12ea1b03638633242bb519108cf9c38fc39e69438cd30d37dcda87a9a02b58b5e5544d6138e15b463b975874f2aeacc8f0fafff21aabf39c1f1d19d31f8d98e7cb2bbd93de196edd244407464f0320cc81595983ce96a4b2cc192e3538be74104f33885680998f8b5b7a70b7ebe3af0b129c2f81cd446b047cdf2f67e0f57a1adc4ff544c41980f4404d4e306b21d1ca016fff9b240c45dc7d6d0472d9f33601f1a147d00b8340b281c9d1b37e88b888327664065bb16d5b29da682fdc676d12dcac13f2be20c4fc75018670c0ec15415bc4fe9f5216a67a14092f6d8b22f568219273bc989d324fcc9be6be298d2c8396a1db694a23f8d5409385ca018e955d4b354585a7c3b101603bb8fc5d188d34dd67e5c1078ed5a8377b6b01426ab0726d8af9a089b61e35c2c9af407de85cbd824688ed3a0d735f807fef14b01af87bc2ff74be5275ace68ef853324a9b6b449eadf3e4ba01da5e108e8f24b1935fe838810000034db0c716c1af381fa74e2aa11ad030411ad5ae4eb4fe7d8bfbb02bf7b5f73fe70823cc326dfe872b00011bd21bfd194e9765513b302671b3ae4215548f77fe104b7d248494b41529d14c3292c7db100eb5aa8646a4f32591cbd0a3cd57083435b3787cfabcacfb7f33982c06f7f4d908288f10286b6a56678403e390514f7c5f32feba6a618787f218a167f8cba7db2c6e5c9dd796b651c15ed34b08f92be624c55e03e8e2699318f848f6c1a288e8834018570531fe71706f4c79691ba1883f8231da9df4cb919fc91156aab69a75735e747a5b67a6c446232cb0ae53e4317dd5520e728ba178d09dfcaed4f26bc224a724ca9aed84923dff678e2eb9a1576afd25f613399f1c1e75131386a1c49cd300858d91ae6b5f63785d237efe8c1911ac5101459739e11c38c4b116f7a811dbeaa442e95c411e04c3e7cc379fbfdb32bd74999532766574e47ad37ebe134694c4fe394db2d9fcc3adf19b762b1e6bb99e30f5f0c76cdf1930c6e33ffce8d588a0c7e54c1a149df0f94e746c0c4cb8f2892cdf5d769bd588395e15438fec6388951f7c177ed4617b382aa319409ba36e7d20ee57b94a24ea89d715c16d0f7797821077ee5112360a761b15a2e5953709584c9d688bb2bf5d85b0983e57aaf39ed60c45e3cd6246c4853132f91e632302b59e31164225c04172b6c36279bd2e5576aa92a1f845b30765fb47e41a880385d5b8850653e9e1aacb2444e6147ab8e630956d717e3ae176cef7809e70425e42f136484740eee947b025ef7a07ebb626950be18134bbea0c14a497a08ba5fa8788d1233b4c8e8bb97018866a2b7479dd0d1b851824572808c4dca3548ebe1694459c14fafcfae9a411c8a2b6566b6f768f4c8fbaff34f8dac95ccea9372cdfedbc7cfa534a914fadf205208069159b5057da580f73e84f83ca5ea294cb8dfcbef5c9a410db83fe32c76acd6af450aa6908f367935adeebe0bb3da47cc9a1453b000f1b249b4c916992a2221d97bead5f986864f8d2d21a43616940e97dd40a369d8066b77b45546f65fd29fe90f99f916f5375c7dc93f71f24bdcfbc8e5fd1f3b38a93850b9b6ebb406cccea6cf31b439e3cbdc6f4c55a40e7348d50979cba4b181b33523d1fcaaa8825923738f5c5acc76b81bfee05351c6460c4335e49698b78937e6d32ad8c87f8b3899a1c4ddaa1bc537c10cfdecc7b20fe37300b82df6702f32ebea74075ad1be85345291b912719c32db3564c5e5201354791426f8d0bd7908226e4e05121af8a73b6414908ca81ff66469468a61395be4cc040345848c4e17f9a85e95d23fe9ddd60a81212c1ad2f0756ead8579c3462e0f889500a489a0ef42ef039e82cb79e7d9155af29e5f2f54b2549293d8ab8071e2e6a50a1368c67c5eb94a85a53a176bcc0c5d16caf4619a7e58bdcb08c9a19167a9a44580cb24dab2f11f17e80f63a7f3ccbf5f764043b68e4a73195e4c6660fa28f940c73803b954989b422dff18f62e4fb8b3b80476dfef0b483e45fdbcb1eb09a6c088b3b0881c3e5ae56a7c327c34df08c9ed0261b4566b2f5b4f2733097a4121fc3b06a4159cffaa18997af65e45bbac479100c6064acf998b74494ac86c397776e825d621a7ea23f940e87e0af4f8cf8861207c921c6d2deec65d6373aff6c4bd0819bb53aa2d52012162c1c186834ba0155545a09a3f1bdf221f0a1f25c1ecea6585dc229f441d47c6964d7193753e8d6998519b9e363e914b1898647a4ce358cd662ed4895c698d73f9fe8977743f5a10910d47749c3d42c24b2441b885ec2806268ea2a73697a1f77f757740acb44ad50f019d0f60e0de229be9aa748de0120f7632f50043138ab3886f883a7612cf3a4dbf524681ba3f784493268e0c905b1d910be157a3618f34a4d05c9afaa39fd67deb0c05e67dccd7b6592e451add270526ab9a0410211a1056f302b04a73d6361ed28184e9554f260cc3cb67be8650f812b3fb2a1ccc4334f6a36d3bfb96d2425fdef11f883e74bf87f5c240d88e6840eb5862664646f56e5295fc1474d36fd9cd517c5fa81a1ab3314635c23fb142114588318a0e4675b0e0a43f71b77bfe5b02b8b85704090368d9eac786b96d0f4be3a17409ec3b51ab43bfd3c88fdc6f00ec5c933ecfe7cac6ceddca8e7bb9c3e75fa807efd2321081ab28fb4b39a71843d916041154bb11643dad8400d5ad58d376fe448d12ff62aa9c82c2c0cf7f7e723fcbe54a93d7ec3633f9516edf81253700ca1d0b9107607990b06032ec225a507e2b893a146f6958d63538063e40236bfa579dfe25fe65db3b5e4cfa0479546848dc3ae478297f6776b6ed2aa98b3a0f39d8261a1f2c824e3e03f21b1f723f546ff2a307735a1141f1a88e77e2bb1e86f2e7fb2f7a6da9f1f20429a148a27c6ba19faecd95a1961ca25c103e35710e757de3ed7c0ac0b395aa8f8bf16e864242d74cd200239ababffaa81178e92d6323312360a27bfd4aebe6e4dec05542ce30c776bde236db01ae0fb76fc98d4ce589bb4006c191d0082d8890644ed91ccf192dff43460ab154308bca4ebc38230c9e20fbb6482e9c81a7b2af40fa3f6317f025119d7acba44b7a4200fc0fa4274de5a1145441b4204ae534bd70c6ad3a91b645473eba49d3c9ab9ed168e61f152880df21d2bfd2b666e9ce4d76e4ba8916326d9867fede032000c5e6d3d9da1789ca9a3edc7df803dc07d6fff1643d79c588ce8c1ea8d45fa4c7e26591feab7b8fd05f51494668028fb6124e42891a81929b71ffece1ad47455f4a2149447f6fa7a2163ca3beefafb1ec0fa40c5ab10ca82c47ff67d7d159e6bf5975f64a78bf7f55f6d276efcd67cfb16368e40d0ebb70c2022342e8e0f0bdd1e0a924b74fbe82ba8829dc04282b4954440ccbe49cfc26b3da389fafdbac843a73bd53a3ff1c2d14a15e8a518c806234d4ca3c0538367f0f57d853ba5231045b927935fa674eaefa92991a89b51c4f8f3a15c98ceb13283a41345323287fe619c2ff4beb807122f15f4c3610ec5a5475d3991da28d38590197e432277be31aa496534e4c92135c8c31b1257afd41aebd8387a7a259598ac9967f896f54e4391001286ed1e562b0c552ec98afaf34d9357743987e2106cc0dfbe88b5eb5d25b65eb4a5481ca3dec8cf30ffe11df132280be971c4ebed3d7f07f50201ce86e1728a3fdcfb6e6ec1be2056d19870353a825c34b9116bcb713ee4799daea49dea9c059f2dfc6c92c4163aafd53bd568ae2b0d6094b6c5acb29245937f771a6bf47ebb0544b0155ab72a496c8b4aa6f8e412ec9feafc22a425e0461745faeeb47405ddde64325339b5ab132b77bceb79c", 0x1000}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r8}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x4044080}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001e40)="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", 0x1000}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r8}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x4044080}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) (async) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x6, [@union={0xd, 0x4, 0x0, 0x5, 0x1, 0xbedc, [{0xf, 0x2, 0xa38}, {0x5, 0x0, 0xdf}, {0xd, 0x4, 0x9}, {0xc, 0x2, 0x7}]}, @datasec={0x3, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x10000, 0x7}, {0x4, 0x3, 0x8}, {0x1, 0x200, 0xfd1}, {0x1, 0x5, 0x1f}, {0x4, 0x5, 0xfffe0000}, {0x1, 0x80000000, 0x5}], "f2"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000980)=""/208, 0xca, 0xd0, 0x1, 0x4}, 0x20) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x6, [@union={0xd, 0x4, 0x0, 0x5, 0x1, 0xbedc, [{0xf, 0x2, 0xa38}, {0x5, 0x0, 0xdf}, {0xd, 0x4, 0x9}, {0xc, 0x2, 0x7}]}, @datasec={0x3, 0x6, 0x0, 0xf, 0x1, [{0x5, 0x10000, 0x7}, {0x4, 0x3, 0x8}, {0x1, 0x200, 0xfd1}, {0x1, 0x5, 0x1f}, {0x4, 0x5, 0xfffe0000}, {0x1, 0x80000000, 0x5}], "f2"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000980)=""/208, 0xca, 0xd0, 0x1, 0x4}, 0x20) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="fb1de86c723064", 0x7}, {&(0x7f0000000100)="d9b59d683296c8cc99ac02374625dea95e5bcb86348135110ec7c392c2b03f2c", 0x20}, {&(0x7f0000000440)="678c8474816cbcb506e0579701d3e7ef141d829b7811b98c8993dc67314a815a3caf81cbaff18a4547a92dd253c0345f4e610dd8d7198700a2610c9e9b6e5c797895da969df2bd83f69ed6526bff87f47af1a32306c025203388c4472a3c2db6fdf433954dc49824ef1dc0e0ffc44191fa84d63bc78be2ff96b48dc2124d8c13627d3f78c27a508bf684ad56231f4a927f9523bdfc03dd19c65f", 0x9a}, {&(0x7f0000000500)="7dc28fb8991e1afd613030b7312a59e116be98f0912f00b58a294da7c8a649202bc7deb3ca712d84d46613440d57225e195f94d6482ad778b96f2ae2f0abb563b41a6c5c675d941354ee450cd0db382f563736cfdbde70e30be2b0e679d7e2dd8b57e3aedddd4841c029a57ef7356701f47318c36528164ad01d58a5d533bef08b47ba807a79e0abad4c429fb437a80ab9c5ce82283128867960df8652ecb3b11d8f20827dbcf18e639223380f4fe219a8d904441da653f88aa1b9d6208c6f5c4c6e16e21977689b6e94ffbc92ce4e54c9c4a9a6c09e798d7c9e30820f6002de9303e3be86cb7b", 0xe7}, {&(0x7f0000000600)="15e7a56f56e2b06a0c2d34b72ae0112a3f4b62555adc96723fb00a784dfb3f79c4fc783e812edf5245c9ed99c4ab8b60e61d55e7bfaeaeb763a24c066295414e62f19470e9bb7d6a936649d342e5079319ce1e779cde6eae85f4be512d14db3fd768c32f88d764fc63f80ae0e835d53d26cc75eefb82a6e0fc45de7527fc197e1365dcf8ffd6dac6f23da42867aa6d45b554bb8ad98f116bcaef241fa1650a2aeef5fd006dd21a63c24c887697c9171f7da6e0225781c0562d0019f1fec1337c9826ac3196120de8155404b3cdff552724e6e94e7b77684241", 0xd9}, {&(0x7f0000000700)="28c0b43fa7992db88e42443b833464b5f07955fb1d9398f90099d5240158288b4d6a18c1e5dab0e1b3c213f25144cb5ea39401aa7b76f4440bc53f2ae2a108cb541d9e9521dd21b4c15a638bed31532d7e0e215fac4dc1bf69bd5c964f3afd82e78944b05004dd35e783f040b1e77888ceee7841e4167e5682374791cc11a5c196bd3692899e7c749abc29002e1b177b4d31", 0x92}, {&(0x7f0000000140)="36b71d1605", 0x5}, {&(0x7f00000007c0)="fc1724dd496605f458f7cecf11403fd18e74de2bb1256725db0b25192b9eb87abdafd2ad3b118089c2acdee8f2eea5411319fc985ad4350cdea1b26422ed87c02aaa1c89ebb75d2c4d811851adb8f72608df89d409a4e36212fd8e0e226af197f3324cf48e29fba61b1b50506fea8006a6badfdcf8de0de57dcdeba81a8afebcfeae45609dc5979bd2ca4104ba5ea3a6298a5112c7cbf74838c76493d1523375cf01bced072625e28ac6d65eb39e436f00485bc3df", 0xb5}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r9, r2, r3, r10]}}], 0xd8, 0x8000}, 0x41) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="fb1de86c723064", 0x7}, {&(0x7f0000000100)="d9b59d683296c8cc99ac02374625dea95e5bcb86348135110ec7c392c2b03f2c", 0x20}, {&(0x7f0000000440)="678c8474816cbcb506e0579701d3e7ef141d829b7811b98c8993dc67314a815a3caf81cbaff18a4547a92dd253c0345f4e610dd8d7198700a2610c9e9b6e5c797895da969df2bd83f69ed6526bff87f47af1a32306c025203388c4472a3c2db6fdf433954dc49824ef1dc0e0ffc44191fa84d63bc78be2ff96b48dc2124d8c13627d3f78c27a508bf684ad56231f4a927f9523bdfc03dd19c65f", 0x9a}, {&(0x7f0000000500)="7dc28fb8991e1afd613030b7312a59e116be98f0912f00b58a294da7c8a649202bc7deb3ca712d84d46613440d57225e195f94d6482ad778b96f2ae2f0abb563b41a6c5c675d941354ee450cd0db382f563736cfdbde70e30be2b0e679d7e2dd8b57e3aedddd4841c029a57ef7356701f47318c36528164ad01d58a5d533bef08b47ba807a79e0abad4c429fb437a80ab9c5ce82283128867960df8652ecb3b11d8f20827dbcf18e639223380f4fe219a8d904441da653f88aa1b9d6208c6f5c4c6e16e21977689b6e94ffbc92ce4e54c9c4a9a6c09e798d7c9e30820f6002de9303e3be86cb7b", 0xe7}, {&(0x7f0000000600)="15e7a56f56e2b06a0c2d34b72ae0112a3f4b62555adc96723fb00a784dfb3f79c4fc783e812edf5245c9ed99c4ab8b60e61d55e7bfaeaeb763a24c066295414e62f19470e9bb7d6a936649d342e5079319ce1e779cde6eae85f4be512d14db3fd768c32f88d764fc63f80ae0e835d53d26cc75eefb82a6e0fc45de7527fc197e1365dcf8ffd6dac6f23da42867aa6d45b554bb8ad98f116bcaef241fa1650a2aeef5fd006dd21a63c24c887697c9171f7da6e0225781c0562d0019f1fec1337c9826ac3196120de8155404b3cdff552724e6e94e7b77684241", 0xd9}, {&(0x7f0000000700)="28c0b43fa7992db88e42443b833464b5f07955fb1d9398f90099d5240158288b4d6a18c1e5dab0e1b3c213f25144cb5ea39401aa7b76f4440bc53f2ae2a108cb541d9e9521dd21b4c15a638bed31532d7e0e215fac4dc1bf69bd5c964f3afd82e78944b05004dd35e783f040b1e77888ceee7841e4167e5682374791cc11a5c196bd3692899e7c749abc29002e1b177b4d31", 0x92}, {&(0x7f0000000140)="36b71d1605", 0x5}, {&(0x7f00000007c0)="fc1724dd496605f458f7cecf11403fd18e74de2bb1256725db0b25192b9eb87abdafd2ad3b118089c2acdee8f2eea5411319fc985ad4350cdea1b26422ed87c02aaa1c89ebb75d2c4d811851adb8f72608df89d409a4e36212fd8e0e226af197f3324cf48e29fba61b1b50506fea8006a6badfdcf8de0de57dcdeba81a8afebcfeae45609dc5979bd2ca4104ba5ea3a6298a5112c7cbf74838c76493d1523375cf01bced072625e28ac6d65eb39e436f00485bc3df", 0xb5}], 0x8, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r9, r2, r3, r10]}}], 0xd8, 0x8000}, 0x41) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) socketpair(0x0, 0x2, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x21, 0x0, 0x0, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) 05:20:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 67) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2067.071543][T18244] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2067.079352][T18244] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2067.087173][T18244] [ 2067.163535][T18256] FAULT_INJECTION: forcing a failure. [ 2067.163535][T18256] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.217517][T18256] CPU: 0 PID: 18256 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2067.229074][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2067.238967][T18256] Call Trace: [ 2067.242089][T18256] [ 2067.244873][T18256] dump_stack_lvl+0x151/0x1b7 [ 2067.249384][T18256] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2067.254847][T18256] ? avc_denied+0x1b0/0x1b0 [ 2067.259191][T18256] dump_stack+0x15/0x17 [ 2067.263179][T18256] should_fail+0x3c6/0x510 [ 2067.267433][T18256] __should_failslab+0xa4/0xe0 [ 2067.272036][T18256] ? vm_area_dup+0x26/0x230 [ 2067.276373][T18256] should_failslab+0x9/0x20 [ 2067.280715][T18256] slab_pre_alloc_hook+0x37/0xd0 [ 2067.285486][T18256] ? vm_area_dup+0x26/0x230 [ 2067.289825][T18256] kmem_cache_alloc+0x44/0x200 [ 2067.294433][T18256] vm_area_dup+0x26/0x230 [ 2067.298595][T18256] copy_mm+0x9a1/0x13e0 [ 2067.302589][T18256] ? copy_signal+0x610/0x610 [ 2067.307014][T18256] ? __init_rwsem+0xd6/0x1c0 [ 2067.311439][T18256] ? copy_signal+0x4e3/0x610 [ 2067.315862][T18256] copy_process+0x1149/0x3290 [ 2067.320381][T18256] ? proc_fail_nth_write+0x20b/0x290 [ 2067.325499][T18256] ? fsnotify_perm+0x6a/0x5d0 [ 2067.330016][T18256] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2067.334965][T18256] ? vfs_write+0x9ec/0x1110 [ 2067.339299][T18256] kernel_clone+0x21e/0x9e0 [ 2067.343640][T18256] ? file_end_write+0x1c0/0x1c0 [ 2067.348325][T18256] ? create_io_thread+0x1e0/0x1e0 [ 2067.353184][T18256] ? mutex_unlock+0xb2/0x260 [ 2067.357968][T18256] ? __mutex_lock_slowpath+0x10/0x10 [ 2067.363092][T18256] __x64_sys_clone+0x23f/0x290 [ 2067.367688][T18256] ? __do_sys_vfork+0x130/0x130 [ 2067.372484][T18256] ? ksys_write+0x260/0x2c0 [ 2067.376824][T18256] ? debug_smp_processor_id+0x17/0x20 [ 2067.382028][T18256] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2067.387931][T18256] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2067.393407][T18256] do_syscall_64+0x3d/0xb0 [ 2067.397651][T18256] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2067.403378][T18256] RIP: 0033:0x7f3c5e561da9 [ 2067.407632][T18256] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2067.427078][T18256] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2067.435319][T18256] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2067.443131][T18256] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2067.450942][T18256] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2067.458749][T18256] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:35 executing program 2: perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0xad, 0x5, 0x8, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000b80)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000079000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6612, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000ffff0000000007000000186700000f000000000000003f000000850000003300000095000000000000002bc348dcbd81442b4b58450e0c6f4605f04f5343bcaf21fb8c8e3ddec7e273a5672036d65aa57d2a21187ea2aad35c097bcfd4d0fca739d9d6bd9199064e25295a60dc6bc539b1ad3c06ef98affeb3c353131761262b05251b7e02723792340577d16aab8630f2405df1bf8dd4b55f8fb9784e262e2d88"], &(0x7f0000000980)='syzkaller\x00', 0x1ff, 0x49, &(0x7f00000009c0)=""/73, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x6, 0x7f, 0x1}, 0x10}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x8, 0xf452}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43405) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xa, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600), 0x10) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r1, 0x8000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="9500000000000000186400000700000000000000010400001800000001000000000000831a93d1009500000200000000850000004c000000c713400001000000"], &(0x7f0000000300)='GPL\x00', 0x7dd6209, 0x4b, &(0x7f00000004c0)=""/75, 0x41000, 0x10, '\x00', 0x0, 0x3, r3, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x0, 0x7ff8}, 0x10, r7, r8, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r0, r9, r10, 0x1, r4]}, 0x80) [ 2067.466568][T18256] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2067.474384][T18256] 05:20:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2d6d656d6f727920de29e72c591ec1ab65745f7072696f202d706572665f6576656e74202d6d656d6f7279202d6f756765746c6220"], 0x35) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000700)="5b54d73b60f0b441e7afffc465971c0da3bdaf3138da7700ff7e3948821d6fedbd11c7877b9454f677732189815fed0135123624a33b3fc87c03c7ef8dddb95745792ee0f40cd617f16f1452b9af6fad50cc8c0de17b27fbbda44b77a4a08ba610cd13de2272197cbbed6db87367f1f79ff581c490a517bad2b83906b457b70a378e13e8253bc8ad2f900f3452e4ba48e313b6b61df76e7bbd616349cafaeb4469b8d1ad8f68646982e62b907a45503ba3b54cc5f7c3c9efcae8cd8c8b16d04650b6303f135348421e90f5489ba3ccfc2465b6e822581c1c507cf85bfe65d79cb8", 0xe1}, {&(0x7f0000000440)="87ef84573a1c36f1", 0x8}, {&(0x7f0000000940)="f63988b20fb87b488be73017a9729cb9f04862746887de1d2b3e705028d38108ef33e5b5e4934a73cd2b88ca368b595a0b856bd4ca494eba2f582b4a26d67e00f63678adc294a6913bee82d923083fbd727b788fbf04fc5e1fc233fae4472fe9bb290e84cbcbc2ecd8b8c7e3aa616f5139dc72279c5c93187f52e6100c79b6fd94e86e560c07099e1db651639a2688eacfca6f5c0cc244b18262c27139eac52e078a40568a844f24c2a797611022144475e5a4a691f57f88efccddb46d8385d5bbd0362eed5cf95026b6d1326cca21201e7c85a65a19f081da7165f3ad7353814832dc9a9e5ae1c74cc94c8c01e1d8af0b26b6272f376ab7431e569516e954", 0xff}, {&(0x7f0000000e40)="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", 0xfe0}, {&(0x7f0000000600)="1dd8ea92aeaf0c28ddc111042813f00749abbbf97e7c99c0fba6d432920f39c1f2fe1f95852a08837070ac813418678f565d703c5480907dac381ee5bc334b2d2b8d9ecc034aa0397768d825c2f246d21ca0dac42a818b9a126452b0e0fcbf805e6295452dd118529e21c44f3af73de0960082f22f332752c59c719bedc7", 0x7e}], 0x5, 0x0, 0x0, 0x800}, 0x40000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x200, 0x0, 0x7fff, 0x0, 0x1, 0x70a, '\x00', 0x0, r9, 0x1, 0x0, 0x5}, 0x48) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0xca, 0x0, 0x0, 0x0, 0x20, 0x10000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x40000000, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x8804, 0x80000000, 0x5a, 0x5, 0x0, 0x2, 0x1000, 0x0, 0xffffff6e, 0x0, 0xda}, r9, 0xc, r6, 0x2) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c09600000000000000008500000029000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x100a, &(0x7f0000001680)=""/4106}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r11, 0x0, 0x96, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61170800b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x3, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da951", 0x0, 0x9}, 0x28) r12 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) r17 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000016c0)="60664770d8b2daae9711fe302be77aca", 0x10}], 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000", @ANYRES32=r13, @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x89a0, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf55d01000048416f5dd3e3ece03c565976981890144fb251c21ed50a8acf7ea3fb2ce01b45c7b8e4d4", 0x4d}, {&(0x7f0000000700)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda0b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a25be177a", 0x91}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES16=r15, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32=r18, @ANYRESHEX=r14, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRES32=r14, @ANYRES8=r11, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, 0x0) r19 = gettid() r20 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001340)=""/74, 0x4a}, {0x0}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) sendmsg$unix(r20, &(0x7f0000000580)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="733d109fa07de36a0a3da7b7d00178b5c68495313dc7274e1287f66b86aeb96e8f7640ab797d516cd67e51acc0694d43f8f19755c9ebebb3221d69cfd1c5efa4f9867a42bdd7b932ebe07158bf242ba808c0ccaf8eba5aa6a49de335381f", 0x5e}, {&(0x7f0000000440)="a06a834d5cd9b84dd504a7a4f79804f66262393452b200c05af4db7f6b66a8aae0c630d8297fa2902c9c09dd854a8e6539d4e132ee10385fd4c534492319d6eb9a24b3d48f69497ab745fd19bda68be714fc5a0b8fe4ec14206cb35e0f0df78f3b1f229eeb0eeef010cae0c25d92c6b7c552ddf442e8906b7500b1", 0x7b}, {&(0x7f0000000200)="10", 0x1}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r21}}}], 0x20, 0x5}, 0x0) sendmsg$unix(r9, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001e40)="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", 0x1000}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xffffffffffffffff, r21}}}, @rights={{0x24, 0x1, 0x1, [r4, r8, r10, r5, r9]}}, @rights={{0x18, 0x1, 0x1, [r4, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x4044080}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000180)="794f67c500c604aa6bd3351db345fb4a1907fd2f812bd1986ee0b4c5ed13409b57face8ee09e22a1d1e258eda26dc463a74a12", 0x33}, {&(0x7f0000000280)="d6d16e755f17510c086cbddc4eea637ed028a473ac1ba1fd78c58241e62b7277a3753659e188b0fee27977522705b55a7a093a063c31f6f53030c219e4fe26680d4292fea669e0cbdfc7918db18de2e211c380f9526946beb022d9546b79a6661fc1f5bd1e74e219f9f37034c336477ddeac8157847526a2cbb3e44a4feea05c8a648e0e7dfdf90128c87ab1854609c450f6c99e92aae06a5cd2eb69d430", 0x9e}, {&(0x7f00000001c0)="de6f52ec9e2e60fe72f2ff95721d20893dc4", 0x12}, {&(0x7f0000000340)="b65c27e3e8038c479cf07cc9f4533f", 0xf}, {&(0x7f00000003c0)="36a82c20db4ffc51e771eb5e725e239559c66255b5f87bcd6d574aadc896ef3ea06a2a19d7e6fd75cb314c9ee1fe7f229ffd356f61e8b9e673bbac0262ec8dd65f52995cabae5ab35d6462c2", 0x4c}, {&(0x7f0000000440)="ddba4be24c0d5afd97cd37103c5dad79cde3b4b3cc68c2d7f40247984d203c2d0482d040d8f62e9097499056ffde7db374fe22eef93aac7426e9040f130e9f668fefa4604f52a8a8cc5832d7a59bbff03ee9edd986d8d730d34bf6be363dc4f80d1a07cfff6c8a2c73dc10867f4ec1", 0x6f}, {&(0x7f00000004c0)="7a91270c57708f89d0e2623cdac58a7f71327f1f", 0x14}, {&(0x7f0000000500)="98b294f1e7c96e105e84d4753e9cc7710c716745884a0268ac5f01936feb2a19e4586eedfbd57f78f0c42e39e0297939b1a2b3d84368ac68f4c14019bc79b910b318934393137f4237f53f8c01727ded9203ccabe813671a2bf908d3c1fdf89a20e6c65ed60b92f859a11e45be096cf46958a4f8307ce67f8d33bf26575bd7c6687798bda19b5a5110339a49120d200142390b465a11f37517fcbbb1fbeaeda98c70284d130e4f6da0dacb0e66d6cdb3391b73aeed80ea77d8a56d00b2c54b4bf8577a6e2a60ac6efcad80af3ab526", 0xcf}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="1a2b789a3d66badefa8d09374cf4b1053a04313a09a01cb8379783893e511be1d070dbebf245abc86a502695b92e37d316f54064b9b52140d0ce229a59a982e130dd2933ac9549b360508bb5cebd896abf46a64b6d710d0cbdb1", 0x5a}], 0xa, &(0x7f0000000900)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r2, r0, r0, r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xf8, 0x800}, 0x4040001) 05:20:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 68) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:35 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2d6d656d6f727920de29e72c591ec1ab65745f7072696f202d706572665f6576656e74202d6d656d6f7279202d6f756765746c6220"], 0x35) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000700)="5b54d73b60f0b441e7afffc465971c0da3bdaf3138da7700ff7e3948821d6fedbd11c7877b9454f677732189815fed0135123624a33b3fc87c03c7ef8dddb95745792ee0f40cd617f16f1452b9af6fad50cc8c0de17b27fbbda44b77a4a08ba610cd13de2272197cbbed6db87367f1f79ff581c490a517bad2b83906b457b70a378e13e8253bc8ad2f900f3452e4ba48e313b6b61df76e7bbd616349cafaeb4469b8d1ad8f68646982e62b907a45503ba3b54cc5f7c3c9efcae8cd8c8b16d04650b6303f135348421e90f5489ba3ccfc2465b6e822581c1c507cf85bfe65d79cb8", 0xe1}, {&(0x7f0000000440)="87ef84573a1c36f1", 0x8}, {&(0x7f0000000940)="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", 0xff}, {&(0x7f0000000e40)="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", 0xfe0}, {&(0x7f0000000600)="1dd8ea92aeaf0c28ddc111042813f00749abbbf97e7c99c0fba6d432920f39c1f2fe1f95852a08837070ac813418678f565d703c5480907dac381ee5bc334b2d2b8d9ecc034aa0397768d825c2f246d21ca0dac42a818b9a126452b0e0fcbf805e6295452dd118529e21c44f3af73de0960082f22f332752c59c719bedc7", 0x7e}], 0x5, 0x0, 0x0, 0x800}, 0x40000) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r6 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x200, 0x0, 0x7fff, 0x0, 0x1, 0x70a, '\x00', 0x0, r9, 0x1, 0x0, 0x5}, 0x48) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0xca, 0x0, 0x0, 0x0, 0x20, 0x10000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x40000000, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x8804, 0x80000000, 0x5a, 0x5, 0x0, 0x2, 0x1000, 0x0, 0xffffff6e, 0x0, 0xda}, r9, 0xc, r6, 0x2) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c09600000000000000008500000029000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x100a, &(0x7f0000001680)=""/4106}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r11, 0x0, 0x96, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61170800b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x3, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da951", 0x0, 0x9}, 0x28) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) (async) r17 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000016c0)="60664770d8b2daae9711fe302be77aca", 0x10}], 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000", @ANYRES32=r13, @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x89a0, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf55d01000048416f5dd3e3ece03c565976981890144fb251c21ed50a8acf7ea3fb2ce01b45c7b8e4d4", 0x4d}, {&(0x7f0000000700)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda0b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a25be177a", 0x91}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES16=r15, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32=r18, @ANYRESHEX=r14, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRES32=r14, @ANYRES8=r11, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, 0x0) (async) r19 = gettid() r20 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001340)=""/74, 0x4a}, {0x0}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) sendmsg$unix(r20, &(0x7f0000000580)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="733d109fa07de36a0a3da7b7d00178b5c68495313dc7274e1287f66b86aeb96e8f7640ab797d516cd67e51acc0694d43f8f19755c9ebebb3221d69cfd1c5efa4f9867a42bdd7b932ebe07158bf242ba808c0ccaf8eba5aa6a49de335381f", 0x5e}, {&(0x7f0000000440)="a06a834d5cd9b84dd504a7a4f79804f66262393452b200c05af4db7f6b66a8aae0c630d8297fa2902c9c09dd854a8e6539d4e132ee10385fd4c534492319d6eb9a24b3d48f69497ab745fd19bda68be714fc5a0b8fe4ec14206cb35e0f0df78f3b1f229eeb0eeef010cae0c25d92c6b7c552ddf442e8906b7500b1", 0x7b}, {&(0x7f0000000200)="10", 0x1}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r21}}}], 0x20, 0x5}, 0x0) (async) sendmsg$unix(r9, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001e40)="fbe71d6f3d8e8370282bc2b4adc49e973d083fd01c95b74523210337d4aa4865c88033b45ee38265ad26cec2a044bad281022dbc5fa8ca61d9989f0f1b15eb71b92299e567203f28de84d6264a68f1bc88ea39350945369bc418bc4d9569317c538a71b8093b95ce512b9278c717c12324237a6138790de02c58030dd0daf47a08b328862b8732f94a3f483a80d0288976cda096ea6a7c47d5855fd6d1e5b0dcf2b9c249a7f334d09cd1ac5455523d010b53af9be9da1ca73c434b01698e67884baa3063f91a94bf7a1f495f545a651d4965a86804de7b80632e2b0150264a1e11f13586ece7448a2bd3b81203a2ffd78d1b99be3a14b6d37dbeb2d5bb0784d38c03543e795cbc4b07ad8350192b0068551b0221b137972c4f069008d5ee18a317e4a740504a341f564a0a7e7db1713317d0348e19bdd01d1131836fd0fb47024822d3d7983bb6a0e5057b3b5766e01212c5ae868af9e255cc2caadc5d71ff742004b8e698fdaddcd7e361423dd8f78d94ec8f63a6bb0bca22ce2081100c40c990ed3ff5c37ea0d662b3e82700787577c1f540df2b2f9fc90424210ddb292b87d0153320de0ae52b12fcd51d37ff04802e4f0128b7bfa56a230943a0262feaad24a2ca5302e1fd6850b96e3233858938e54df371f99b7e640da1baaf1bb755491a98a3c958bc7d5fe233e30c1f2ab9a4981b75d14fe7d09e28e90d769d89202e8aa5b83cc8cd1d987d575a07a337acde2153f103f6d2ccc2ec8ba35f80f5b25915b6fe7fe00a95703941c02e057e764acfdf7113930ce589384864dff8dd268cc820e0c81abbe5b1c530b10e8940b74b740cb09f4f92a35f23839e18b86206dcfa3034eb140e6a0b818fe058a0fc083d7c60d4d47b4f42d0feda1b36ed863dc00dc7a0ed462921b9f1f090c0c6cadec1cbbea99f9e8de0796f02c3033cebe92e9a5bdaa8006b577e4eda4b6b76cde5b4720a4a3d6515a6a943ce496b87697c570b9f080a634d8df696b6810ab7e7530fd19e0303cd0fc22ac053c63e0d27ff91eb0ed41ef92c94c9a356db3b7f4441cb16bb2e8d33d50353e5420ab5f2cf07ac5d5b651dc583b76d70d43d63c8db8b2b813941a117e4755adbc959c3960bbff78852b7ea1d8a9246e136eaf8b9e513fbbebd1f025d5b8bf89e654310554f9d873c05655dfbd897115cf15a6881f8b5b3a861de1adcd18f637078056d150e13434ec94a2afb0bddaa0da6d3b843b9ca5cf7fd51e623ab3ab9111198b646b89f1f2124a0251faf6e991b095998e85eb955904255baaa174732eb746061bc0dcc27e39e9542db542ec57eea3d1a691dfefcf448e165a1e3c124aaf9b6a9dc754106b82af0e23a13f17d8da51187437ff610449a03aec66f18afc5b6379116f7b1e3fc1194c7826de625dda87ac7b6829fc1862cee004e98f699eec563b764abcb11e04adb0d981800154fbb6041b4f65035fb5e831ddc6beedb76b3746393b388afcd4c8d4483154cc5134afc8c491f43a4447cc4b1859cefa0e89be506b00f2e2e94628678bedabb6d2c8271623b0ff435a3b2d6b444cb76bffa6a67f8f2a1264059609ea6e8fa690cbaca7fa9a4c2ec35973fcc41fcc8cec936b10554adf613df12f67c32f0b91c74fad1409d34bc036efe923734310439a7e180e852760eea8175700a707590c80c629c82eaa273594133943ee4d47eb451481c03f67c70faf92d2934f5730bee42b48b5157a5e4b2be668dfe6c327de4ef58a8dbfe0e803f04d7e58849d8e72909a05677fd5bf5b97ca1a6b0335562e75527a0acb7b3a0b13a1c61d4ee6ba51645743930d9854a5f3d1b2b8741233ec244e39926e7aa304e5cd50368e76a69628491f7bd2c4be6c25a4dd1505b53453f0d19da880ab448b12fb2189bbdde1a6693f6c4d6654af1da45e9c3efba4dc12ea1b03638633242bb519108cf9c38fc39e69438cd30d37dcda87a9a02b58b5e5544d6138e15b463b975874f2aeacc8f0fafff21aabf39c1f1d19d31f8d98e7cb2bbd93de196edd244407464f0320cc81595983ce96a4b2cc192e3538be74104f33885680998f8b5b7a70b7ebe3af0b129c2f81cd446b047cdf2f67e0f57a1adc4ff544c41980f4404d4e306b21d1ca016fff9b240c45dc7d6d0472d9f33601f1a147d00b8340b281c9d1b37e88b888327664065bb16d5b29da682fdc676d12dcac13f2be20c4fc75018670c0ec15415bc4fe9f5216a67a14092f6d8b22f568219273bc989d324fcc9be6be298d2c8396a1db694a23f8d5409385ca018e955d4b354585a7c3b101603bb8fc5d188d34dd67e5c1078ed5a8377b6b01426ab0726d8af9a089b61e35c2c9af407de85cbd824688ed3a0d735f807fef14b01af87bc2ff74be5275ace68ef853324a9b6b449eadf3e4ba01da5e108e8f24b1935fe838810000034db0c716c1af381fa74e2aa11ad030411ad5ae4eb4fe7d8bfbb02bf7b5f73fe70823cc326dfe872b00011bd21bfd194e9765513b302671b3ae4215548f77fe104b7d248494b41529d14c3292c7db100eb5aa8646a4f32591cbd0a3cd57083435b3787cfabcacfb7f33982c06f7f4d908288f10286b6a56678403e390514f7c5f32feba6a618787f218a167f8cba7db2c6e5c9dd796b651c15ed34b08f92be624c55e03e8e2699318f848f6c1a288e8834018570531fe71706f4c79691ba1883f8231da9df4cb919fc91156aab69a75735e747a5b67a6c446232cb0ae53e4317dd5520e728ba178d09dfcaed4f26bc224a724ca9aed84923dff678e2eb9a1576afd25f613399f1c1e75131386a1c49cd300858d91ae6b5f63785d237efe8c1911ac5101459739e11c38c4b116f7a811dbeaa442e95c411e04c3e7cc379fbfdb32bd74999532766574e47ad37ebe134694c4fe394db2d9fcc3adf19b762b1e6bb99e30f5f0c76cdf1930c6e33ffce8d588a0c7e54c1a149df0f94e746c0c4cb8f2892cdf5d769bd588395e15438fec6388951f7c177ed4617b382aa319409ba36e7d20ee57b94a24ea89d715c16d0f7797821077ee5112360a761b15a2e5953709584c9d688bb2bf5d85b0983e57aaf39ed60c45e3cd6246c4853132f91e632302b59e31164225c04172b6c36279bd2e5576aa92a1f845b30765fb47e41a880385d5b8850653e9e1aacb2444e6147ab8e630956d717e3ae176cef7809e70425e42f136484740eee947b025ef7a07ebb626950be18134bbea0c14a497a08ba5fa8788d1233b4c8e8bb97018866a2b7479dd0d1b851824572808c4dca3548ebe1694459c14fafcfae9a411c8a2b6566b6f768f4c8fbaff34f8dac95ccea9372cdfedbc7cfa534a914fadf205208069159b5057da580f73e84f83ca5ea294cb8dfcbef5c9a410db83fe32c76acd6af450aa6908f367935adeebe0bb3da47cc9a1453b000f1b249b4c916992a2221d97bead5f986864f8d2d21a43616940e97dd40a369d8066b77b45546f65fd29fe90f99f916f5375c7dc93f71f24bdcfbc8e5fd1f3b38a93850b9b6ebb406cccea6cf31b439e3cbdc6f4c55a40e7348d50979cba4b181b33523d1fcaaa8825923738f5c5acc76b81bfee05351c6460c4335e49698b78937e6d32ad8c87f8b3899a1c4ddaa1bc537c10cfdecc7b20fe37300b82df6702f32ebea74075ad1be85345291b912719c32db3564c5e5201354791426f8d0bd7908226e4e05121af8a73b6414908ca81ff66469468a61395be4cc040345848c4e17f9a85e95d23fe9ddd60a81212c1ad2f0756ead8579c3462e0f889500a489a0ef42ef039e82cb79e7d9155af29e5f2f54b2549293d8ab8071e2e6a50a1368c67c5eb94a85a53a176bcc0c5d16caf4619a7e58bdcb08c9a19167a9a44580cb24dab2f11f17e80f63a7f3ccbf5f764043b68e4a73195e4c6660fa28f940c73803b954989b422dff18f62e4fb8b3b80476dfef0b483e45fdbcb1eb09a6c088b3b0881c3e5ae56a7c327c34df08c9ed0261b4566b2f5b4f2733097a4121fc3b06a4159cffaa18997af65e45bbac479100c6064acf998b74494ac86c397776e825d621a7ea23f940e87e0af4f8cf8861207c921c6d2deec65d6373aff6c4bd0819bb53aa2d52012162c1c186834ba0155545a09a3f1bdf221f0a1f25c1ecea6585dc229f441d47c6964d7193753e8d6998519b9e363e914b1898647a4ce358cd662ed4895c698d73f9fe8977743f5a10910d47749c3d42c24b2441b885ec2806268ea2a73697a1f77f757740acb44ad50f019d0f60e0de229be9aa748de0120f7632f50043138ab3886f883a7612cf3a4dbf524681ba3f784493268e0c905b1d910be157a3618f34a4d05c9afaa39fd67deb0c05e67dccd7b6592e451add270526ab9a0410211a1056f302b04a73d6361ed28184e9554f260cc3cb67be8650f812b3fb2a1ccc4334f6a36d3bfb96d2425fdef11f883e74bf87f5c240d88e6840eb5862664646f56e5295fc1474d36fd9cd517c5fa81a1ab3314635c23fb142114588318a0e4675b0e0a43f71b77bfe5b02b8b85704090368d9eac786b96d0f4be3a17409ec3b51ab43bfd3c88fdc6f00ec5c933ecfe7cac6ceddca8e7bb9c3e75fa807efd2321081ab28fb4b39a71843d916041154bb11643dad8400d5ad58d376fe448d12ff62aa9c82c2c0cf7f7e723fcbe54a93d7ec3633f9516edf81253700ca1d0b9107607990b06032ec225a507e2b893a146f6958d63538063e40236bfa579dfe25fe65db3b5e4cfa0479546848dc3ae478297f6776b6ed2aa98b3a0f39d8261a1f2c824e3e03f21b1f723f546ff2a307735a1141f1a88e77e2bb1e86f2e7fb2f7a6da9f1f20429a148a27c6ba19faecd95a1961ca25c103e35710e757de3ed7c0ac0b395aa8f8bf16e864242d74cd200239ababffaa81178e92d6323312360a27bfd4aebe6e4dec05542ce30c776bde236db01ae0fb76fc98d4ce589bb4006c191d0082d8890644ed91ccf192dff43460ab154308bca4ebc38230c9e20fbb6482e9c81a7b2af40fa3f6317f025119d7acba44b7a4200fc0fa4274de5a1145441b4204ae534bd70c6ad3a91b645473eba49d3c9ab9ed168e61f152880df21d2bfd2b666e9ce4d76e4ba8916326d9867fede032000c5e6d3d9da1789ca9a3edc7df803dc07d6fff1643d79c588ce8c1ea8d45fa4c7e26591feab7b8fd05f51494668028fb6124e42891a81929b71ffece1ad47455f4a2149447f6fa7a2163ca3beefafb1ec0fa40c5ab10ca82c47ff67d7d159e6bf5975f64a78bf7f55f6d276efcd67cfb16368e40d0ebb70c2022342e8e0f0bdd1e0a924b74fbe82ba8829dc04282b4954440ccbe49cfc26b3da389fafdbac843a73bd53a3ff1c2d14a15e8a518c806234d4ca3c0538367f0f57d853ba5231045b927935fa674eaefa92991a89b51c4f8f3a15c98ceb13283a41345323287fe619c2ff4beb807122f15f4c3610ec5a5475d3991da28d38590197e432277be31aa496534e4c92135c8c31b1257afd41aebd8387a7a259598ac9967f896f54e4391001286ed1e562b0c552ec98afaf34d9357743987e2106cc0dfbe88b5eb5d25b65eb4a5481ca3dec8cf30ffe11df132280be971c4ebed3d7f07f50201ce86e1728a3fdcfb6e6ec1be2056d19870353a825c34b9116bcb713ee4799daea49dea9c059f2dfc6c92c4163aafd53bd568ae2b0d6094b6c5acb29245937f771a6bf47ebb0544b0155ab72a496c8b4aa6f8e412ec9feafc22a425e0461745faeeb47405ddde64325339b5ab132b77bceb79c", 0x1000}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xffffffffffffffff, r21}}}, @rights={{0x24, 0x1, 0x1, [r4, r8, r10, r5, r9]}}, @rights={{0x18, 0x1, 0x1, [r4, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x4044080}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000180)="794f67c500c604aa6bd3351db345fb4a1907fd2f812bd1986ee0b4c5ed13409b57face8ee09e22a1d1e258eda26dc463a74a12", 0x33}, {&(0x7f0000000280)="d6d16e755f17510c086cbddc4eea637ed028a473ac1ba1fd78c58241e62b7277a3753659e188b0fee27977522705b55a7a093a063c31f6f53030c219e4fe26680d4292fea669e0cbdfc7918db18de2e211c380f9526946beb022d9546b79a6661fc1f5bd1e74e219f9f37034c336477ddeac8157847526a2cbb3e44a4feea05c8a648e0e7dfdf90128c87ab1854609c450f6c99e92aae06a5cd2eb69d430", 0x9e}, {&(0x7f00000001c0)="de6f52ec9e2e60fe72f2ff95721d20893dc4", 0x12}, {&(0x7f0000000340)="b65c27e3e8038c479cf07cc9f4533f", 0xf}, {&(0x7f00000003c0)="36a82c20db4ffc51e771eb5e725e239559c66255b5f87bcd6d574aadc896ef3ea06a2a19d7e6fd75cb314c9ee1fe7f229ffd356f61e8b9e673bbac0262ec8dd65f52995cabae5ab35d6462c2", 0x4c}, {&(0x7f0000000440)="ddba4be24c0d5afd97cd37103c5dad79cde3b4b3cc68c2d7f40247984d203c2d0482d040d8f62e9097499056ffde7db374fe22eef93aac7426e9040f130e9f668fefa4604f52a8a8cc5832d7a59bbff03ee9edd986d8d730d34bf6be363dc4f80d1a07cfff6c8a2c73dc10867f4ec1", 0x6f}, {&(0x7f00000004c0)="7a91270c57708f89d0e2623cdac58a7f71327f1f", 0x14}, {&(0x7f0000000500)="98b294f1e7c96e105e84d4753e9cc7710c716745884a0268ac5f01936feb2a19e4586eedfbd57f78f0c42e39e0297939b1a2b3d84368ac68f4c14019bc79b910b318934393137f4237f53f8c01727ded9203ccabe813671a2bf908d3c1fdf89a20e6c65ed60b92f859a11e45be096cf46958a4f8307ce67f8d33bf26575bd7c6687798bda19b5a5110339a49120d200142390b465a11f37517fcbbb1fbeaeda98c70284d130e4f6da0dacb0e66d6cdb3391b73aeed80ea77d8a56d00b2c54b4bf8577a6e2a60ac6efcad80af3ab526", 0xcf}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="1a2b789a3d66badefa8d09374cf4b1053a04313a09a01cb8379783893e511be1d070dbebf245abc86a502695b92e37d316f54064b9b52140d0ce229a59a982e130dd2933ac9549b360508bb5cebd896abf46a64b6d710d0cbdb1", 0x5a}], 0xa, &(0x7f0000000900)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r2, r0, r0, r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xf8, 0x800}, 0x4040001) [ 2067.694171][T18266] FAULT_INJECTION: forcing a failure. [ 2067.694171][T18266] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.708596][T18266] CPU: 0 PID: 18266 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2067.720136][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2067.730027][T18266] Call Trace: [ 2067.733152][T18266] [ 2067.735934][T18266] dump_stack_lvl+0x151/0x1b7 [ 2067.740447][T18266] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2067.745914][T18266] dump_stack+0x15/0x17 [ 2067.749901][T18266] should_fail+0x3c6/0x510 [ 2067.754156][T18266] __should_failslab+0xa4/0xe0 [ 2067.758757][T18266] ? anon_vma_clone+0x9a/0x500 [ 2067.763356][T18266] should_failslab+0x9/0x20 [ 2067.767694][T18266] slab_pre_alloc_hook+0x37/0xd0 [ 2067.772468][T18266] ? anon_vma_clone+0x9a/0x500 [ 2067.777069][T18266] kmem_cache_alloc+0x44/0x200 [ 2067.781670][T18266] anon_vma_clone+0x9a/0x500 [ 2067.786098][T18266] anon_vma_fork+0x91/0x4e0 [ 2067.790443][T18266] ? anon_vma_name+0x43/0x70 [ 2067.794861][T18266] ? vm_area_dup+0x17a/0x230 [ 2067.799288][T18266] copy_mm+0xa3a/0x13e0 [ 2067.803283][T18266] ? copy_signal+0x610/0x610 [ 2067.807707][T18266] ? __init_rwsem+0xd6/0x1c0 [ 2067.812133][T18266] ? copy_signal+0x4e3/0x610 [ 2067.816561][T18266] copy_process+0x1149/0x3290 [ 2067.821075][T18266] ? proc_fail_nth_write+0x20b/0x290 [ 2067.826195][T18266] ? fsnotify_perm+0x6a/0x5d0 [ 2067.830708][T18266] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2067.835654][T18266] ? vfs_write+0x9ec/0x1110 [ 2067.839996][T18266] kernel_clone+0x21e/0x9e0 [ 2067.844333][T18266] ? file_end_write+0x1c0/0x1c0 [ 2067.849021][T18266] ? create_io_thread+0x1e0/0x1e0 [ 2067.853879][T18266] ? mutex_unlock+0xb2/0x260 [ 2067.858308][T18266] ? __mutex_lock_slowpath+0x10/0x10 [ 2067.863431][T18266] __x64_sys_clone+0x23f/0x290 [ 2067.868464][T18266] ? __do_sys_vfork+0x130/0x130 [ 2067.873148][T18266] ? ksys_write+0x260/0x2c0 [ 2067.877490][T18266] ? debug_smp_processor_id+0x17/0x20 [ 2067.882696][T18266] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2067.888599][T18266] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2067.894067][T18266] do_syscall_64+0x3d/0xb0 [ 2067.898322][T18266] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2067.904048][T18266] RIP: 0033:0x7f3c5e561da9 [ 2067.908301][T18266] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2067.927742][T18266] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2067.935987][T18266] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:35 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x6, 0x81, 0x2, 0x0, 0xffff, 0x8800, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3ff, 0x4}, 0x100800, 0x9dc, 0x1, 0x7, 0x1, 0x2312, 0x0, 0x0, 0x25e, 0x0, 0x20000000b210}, r1, 0xf, r0, 0x7) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x5f1}, 0x0, 0x0, 0x0, 0x5963f2b9346ccd78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75a}, 0x0, 0x4, 0xffffffffffffffff, 0x6) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) [ 2067.943798][T18266] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2067.951611][T18266] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2067.959422][T18266] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2067.967235][T18266] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2067.975048][T18266] 05:20:36 executing program 0: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000280)="3fa31cccd1914dc67d33d4bad9c0e2ded9a44919144305ed4df5901eb1b816368d2bdd4f0c066143f58abcc479f3779dc316e6df4f37c8f7b2cb89a373878da44857af6c83fd6f7093465d14ee210ac8d1df4b53d33a734dbc3174d72190e67b9cb3a821ce8fd23a1477ca4bad5d32ffd1ac779314e2d7107f7879e0e16c14c39e1563c720382784d0c60e491b161d9c2b62db6d9936494fb5f33c2f078e3c27895e987c7079bd82f989cdcde6560d0b9a59bdaaa3014178a5c7943312522182735624e72bc5447925f1cdc1409fdc89960df9328ed2ca7744ca10340d88e19b492ac13dc0a497c0e45ba26e679989b6", &(0x7f0000000080)=""/113, &(0x7f00000003c0)="e7bbcd8ffa4b514b5e5eb6ab9938a95e02b3eb837b759c5317a573e1c5036f5f39eb9e192543ec624ec98c53f44de0c18001299c00ba117356311b0ee1114949377072b612252816c699d88a1da19ed3ab7807dee86207c36b7a7b94dcf3ebfbf42379ebeeb99aca10fadf17dfa94785e03c", &(0x7f0000000440)="522d0752a2697769d5661b557f9d5039307c0a54879c79b387fb7385695ee0de6f12bdc1ac09fe4474635020c8e408cd2b2127f2b4f5d75e472906f4d5422c988a48ad433dc5d513f06355ae13555a7c0e36e6319b1248ad794b25de7583c8", 0x8001, 0xffffffffffffffff, 0x4}, 0x38) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) getpid() write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:36 executing program 2: perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0xad, 0x5, 0x8, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000b80)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000079000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6612, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000ffff0000000007000000186700000f000000000000003f000000850000003300000095000000000000002bc348dcbd81442b4b58450e0c6f4605f04f5343bcaf21fb8c8e3ddec7e273a5672036d65aa57d2a21187ea2aad35c097bcfd4d0fca739d9d6bd9199064e25295a60dc6bc539b1ad3c06ef98affeb3c353131761262b05251b7e02723792340577d16aab8630f2405df1bf8dd4b55f8fb9784e262e2d88"], &(0x7f0000000980)='syzkaller\x00', 0x1ff, 0x49, &(0x7f00000009c0)=""/73, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x6, 0x7f, 0x1}, 0x10}, 0x80) (async) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x8, 0xf452}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r7, 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43405) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xa, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600), 0x10) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r1, 0x8000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="9500000000000000186400000700000000000000010400001800000001000000000000831a93d1009500000200000000850000004c000000c713400001000000"], &(0x7f0000000300)='GPL\x00', 0x7dd6209, 0x4b, &(0x7f00000004c0)=""/75, 0x41000, 0x10, '\x00', 0x0, 0x3, r3, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x0, 0x7ff8}, 0x10, r7, r8, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r0, r9, r10, 0x1, r4]}, 0x80) 05:20:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 69) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2068.389817][T18286] FAULT_INJECTION: forcing a failure. [ 2068.389817][T18286] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.414088][T18286] CPU: 0 PID: 18286 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2068.425639][T18286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2068.435534][T18286] Call Trace: [ 2068.438657][T18286] [ 2068.441436][T18286] dump_stack_lvl+0x151/0x1b7 [ 2068.445949][T18286] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2068.451421][T18286] dump_stack+0x15/0x17 [ 2068.455409][T18286] should_fail+0x3c6/0x510 [ 2068.459665][T18286] __should_failslab+0xa4/0xe0 [ 2068.464262][T18286] ? vm_area_dup+0x26/0x230 [ 2068.468608][T18286] should_failslab+0x9/0x20 [ 2068.472943][T18286] slab_pre_alloc_hook+0x37/0xd0 [ 2068.477715][T18286] ? vm_area_dup+0x26/0x230 [ 2068.482056][T18286] kmem_cache_alloc+0x44/0x200 [ 2068.486656][T18286] vm_area_dup+0x26/0x230 [ 2068.490819][T18286] copy_mm+0x9a1/0x13e0 [ 2068.494813][T18286] ? copy_signal+0x610/0x610 [ 2068.499237][T18286] ? __init_rwsem+0xd6/0x1c0 [ 2068.503661][T18286] ? copy_signal+0x4e3/0x610 [ 2068.508089][T18286] copy_process+0x1149/0x3290 [ 2068.512603][T18286] ? proc_fail_nth_write+0x20b/0x290 [ 2068.517723][T18286] ? fsnotify_perm+0x6a/0x5d0 [ 2068.522235][T18286] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2068.527184][T18286] ? vfs_write+0x9ec/0x1110 [ 2068.531524][T18286] kernel_clone+0x21e/0x9e0 [ 2068.535862][T18286] ? file_end_write+0x1c0/0x1c0 [ 2068.540553][T18286] ? create_io_thread+0x1e0/0x1e0 [ 2068.545407][T18286] ? mutex_unlock+0xb2/0x260 [ 2068.549837][T18286] ? __mutex_lock_slowpath+0x10/0x10 [ 2068.554958][T18286] __x64_sys_clone+0x23f/0x290 [ 2068.559558][T18286] ? __do_sys_vfork+0x130/0x130 [ 2068.564244][T18286] ? ksys_write+0x260/0x2c0 [ 2068.568593][T18286] ? debug_smp_processor_id+0x17/0x20 [ 2068.573791][T18286] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2068.579691][T18286] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2068.585161][T18286] do_syscall_64+0x3d/0xb0 [ 2068.589414][T18286] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2068.595141][T18286] RIP: 0033:0x7f3c5e561da9 [ 2068.599397][T18286] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2068.618837][T18286] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2068.627082][T18286] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:36 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2d6d656d6f727920de29e72c591ec1ab65745f7072696f202d706572665f6576656e74202d6d656d6f7279202d6f756765746c6220"], 0x35) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (rerun: 32) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000700)="5b54d73b60f0b441e7afffc465971c0da3bdaf3138da7700ff7e3948821d6fedbd11c7877b9454f677732189815fed0135123624a33b3fc87c03c7ef8dddb95745792ee0f40cd617f16f1452b9af6fad50cc8c0de17b27fbbda44b77a4a08ba610cd13de2272197cbbed6db87367f1f79ff581c490a517bad2b83906b457b70a378e13e8253bc8ad2f900f3452e4ba48e313b6b61df76e7bbd616349cafaeb4469b8d1ad8f68646982e62b907a45503ba3b54cc5f7c3c9efcae8cd8c8b16d04650b6303f135348421e90f5489ba3ccfc2465b6e822581c1c507cf85bfe65d79cb8", 0xe1}, {&(0x7f0000000440)="87ef84573a1c36f1", 0x8}, {&(0x7f0000000940)="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", 0xff}, {&(0x7f0000000e40)="2322b062b1eb63a8960d36cbcaf680d8809bf37fe42137c756ab65be13e2ed55b7905a2aaed70e54cf5c9430c07627a896671829f5ae2ce2960ba1546486fbfa8f26029348db8289da07af4fff5e1949d7a82dd7d73738e6a61824d64e5c2f02346dd20cba47adbcc57fc9331811450f0049e5bb7f03d387b78c48427d7df5f68ba35f76d49418fe8b2f9229e9a4bba5b0f5d2a15cff1690d7dae5fa148a20e10094ff47020d2d8629b2fe17a41c7380b8204a975a661531bcea1abf92c1944171b1870c1d7a46931754580e0e2be688e415505f76760b13238aa6d4bc19bf14fd4a36ff30ab5493aa6ba8042a5db9d746c5c0da238ff7ddd981dee69b20931fdd6d4426a5e674a4829f5f10d498919589d0b119c71b6e4ad427877b1c069a36254692b748d4ec2094e3367b8e5933a385f7a4ae73f0f59e4a18f737fdbd9a8c5f7f89704611ffa9dbf10a062b013f07d898aef117a0169fc0cbcf234ef597a2fce760a81f621e68fe508bc08f3fa492779df4b029e6861d0ced534a3b08442ac5e5dd2f2e4c2f5c51ee18a29c880360cb55ecae3104ec4348b206112ae0da3452728a783297ed9969fae224b786069971bf99fba522cf61800df92e015f45810583ec0d84321edd15664b8a11cc9d06680e0e1b259dcd2da323ce0f0ca21454dff11d59fe932c5d77beb02ebf8be32f70090d7bb1b30d1605e3566d3332e8f92dd1490ffee5368e3eeaa3f22a110537c56e63c3af95b25158f023e4e68f69c8c3772dab69edd1407d41f2a99b3b821fdc805f823923455214425689fdd78c0f3e24518676c0ba412a4cf9cfe709e451b48eb6f3278930553ef2db5e2f08b9622a88fa60dd7b49acacf6979a1acece183df06645ca572a7514630e9ea37d955c23d2c8a287373b5579a01e14c163b1da91dd0fd2de5b2fc568f3427c2998839287cde93589b48dc74bf80105704429b2dc7f4962af6b7e94b28ed13180e7893a0643cb534253de95e049411240466f46cbea3e6b1057bad66a5ea8c90706c329aac885e2af3d9b595d364db8b3c748c44ab2927958142403385cb9c4b8e06de3c370510f88df3937c803fbfa89a7b3a01a7868a4761417f37959aa36b4be5377e94c7b803ef628caa6b1fe3110cc184edd14d7a3217501f5ca2316aec25b4f806a137f902e8db6efbdbc4781e7b6aed3d5fffe74156d9d93c2093295f07b28c1bef8b45bd99c2eb2f59e03b0f7c09e4333dba2c27b4cc51dd43472b3a0b405f35fd0a7ae19b778bf584adf9df8d6211a53c7803b937dd5856d71d81cd15bf010591b4e56e4dd040bb772fa6d7d68a05b2b36bf00d59f534d931b1c4ffb08e725993c2869c5ced37de43d4f6071257900d7fbf4f539c870eb8333947d1b8470342ca91a6db840b40cc4820045510a678e7f9676b7e69c81e40b644778988efb9b37d52ac51146ae8dfe1b80704bbe79dea35d6cf7315840ba44c232fc5acf29b8240785ecd795f22d5ac4e4bb0252c5bc86f768a01d0c23ccee74c00bd42421f73ffa6dd5364ed378b47b52d53aa58ac08a778f31443ba4bbd314297ab3cfb0dca41e0ffd5a4bfcdc7d66fc5da6f6b2ee3021bc63f08ced86a31882e93f618962ba60870baf4d8c425fc6dd0dee23d4e273bf53e0d15e098c01afd4dd7484e6603ea54df6fb4dbf00d16641c025b6ada59e100e76e0153343fd92d1297636cbcae426969d7b1e4cff442ab5361ec92025150081f3c1ef44e8e1f3dbf2de06829cd39f9e7c2c741ee98ca14755e1cc5f02123c7cf9c8e8051cff06fe2aded59def5c68cb006b7464cddc0c6ab7bcc241d81b8137da308fdb601ccf4d0157d5f97f226fb1af4a10ee200486d57242c916f4a363729544916b5c8b038debc2c57b6f840bda18deb86581023b2d74d31ce86ca9d174c6ea5a510bd46d3f0ab5a8894e31db8718117e726dbfce0fb2216770cb540cc38512723f7535289db01cf96e9c3baba2fa5919569338a14992b658af67769103a981b143566575759f683ea43ef5f34f816e884ec7484830bb942358bb5f3c1a626399e1810a04fc313b4d776c9d536be8120ec828e10042c8ea147afea686e812e9413b2034b7dd56eb23bd7ff5bdae9aab3aae9c32c190d3c9ff20d66453db31f902fa8b5b65bd19b1d2ddb91d619260d6cdf3bc8ff9747b927e30c9251c69a0a0bec2f7e8f95c65bfa3e8da1444ebfca9040dbf9e6b30be27d1d6d07b1765eb78bafb71549804f1f7b3fe429ebed12bd6f99d30de8b48dff62a54fa06fac2c0b4609d70e64ab3c603cfb81f42d496850d98e84f2655dd8bc92e862cab9dd2b8715138b730f1cb69824b1f94d2d9f99a1b049f993919e4a002e1b5f494a34bc0067de64408f9ad1eb7d850ef62e4673af75429f7d1b84aaf45f3ff2eb6852594bd124422dc71c3e48b4400fcda6f3a75ae5f755fe80661a228ee3ca78e5ab75c75ff956b4063e9822a7376355e2e92986075839ae712c4cc79bf06303f489e80f9b5c6af4c079e0558b0605f7cb24ad67fb803cbf29c25e3cf5f777cc92cd772750910f04f6022eab25e4814efbcb9e5bfecbe06219e2f7a2fe0c9fddb9637adeceeeceeb3795e0ec4aa6ea9701993926096a488139ceee5bd56b5117e1ab79913db169d37ddb526b49419b063d2fa2e35192d797d5002708844a7d3a17aafc715e8f9041f73573560c2aea99c5c4c1dc85f723c3e05640e33983fc3f8456f3e2c87612a9cc705a6667d5139006ebb2a796cffe980366e803b9f44fac1d6aa51944960fe6411c20057ce41300a3d9d36122f7f03f1eb24e54cfb1054099df54ce8edd4ab8786b67e9c968a775230541076cb93cd0d8af6a0dad9dbecc662d71349a3cce9105cb22d0a1efefb248eca0c09487c0ff87dc33229b06bc09c9615ad70613a0dd0eece613147cb15cf3514ea813e32f1f091280dfe2d5cee9ad7cfa326fb0df2befff51b9eec60bebb8a31e3e79a8b1faf434d280ee580d2fd4b4b8c945a21ffedd1b69fb79b10d273117a8e670698a596ab5848a5e45d3fcdcd739aecf7101672dab6c214701fbb188c7759cb22a897704f327f06369329c00147c4d7c4d1c7d542f75bc232dbde81c9714537c9b73fb6e5a6fcd1ba785834c32f708a16dce53334fc714ff3bf86cf585bb8ea7d998754429d8c2fdefbedceddf60e874be7b0f5bc55a7306b90e32e0337105087870ec56b26b860518b1f1a9ef05b8e5c109cc7baa8ae782bc93dd02d9ccf68739a9ea15a0cf7210a4cb5814923871f4d6a5881bc624e7729ad452fd60cc30de6c023143291f7506dee596f879289ea16a97255da1452817462bb1c2c702f18aa96f40582cb6fdba41d9f07590b2a98ae4ad7264e49a6d86e45fc844722ca449826149c13b486ff2f17daff4a83f09777f7e805b9950ba6edf94dfb86b23287aafe32b5a255e5a2dd6efa514f396348b7105b11ce5df72974df04435393a75a7c4ce463c328b4b277445af8396384214d66ee1c6c0c5b91ea6bdc2a2ff16489b78f5a3536a485b5f7c760017e1f71a0e482b8fbac78fd4fdd8897491afabf6efa8825b65acb893f702f89289e416397b1b223d5cb128c36b18b8b8dd5c86ac78d4591d2353be34dbd258a147b7f3118c872ffb0645b64c5623a57f31e7f36b69f515b44a6a1ae4a887db6e22422f4b1e29148a9cab02d8ddbe4418ac39708557de4b6fc4c7aef2c5c61281ef440b9d2e594a651b7b0d68dd9a0412ed165147314bd4354ea817257432fe1939af5922c7fa6f6026a74e5cdca44e70f1335042eca69e77a2ec6943803db9425cb29d92d959dbc31aabdf3d2039c2984823320fed3d7c09e5ef76bddaa47dc4f8ee028027c7b39b61a63e050c24ab76b73c7ca8bbaf3fd9a75b5b140ef2a38a99dc9dd5c99ce0234ecf8b9f6d5b3dfed78d8eb93487bf2072d2b7e34e307489891dfd2843fc15e68adb58dbb1b4eb1529ae4792d4ff169087cc8e347af0abf4fbd455280a47379c5cfa68bd70d44f4e3703469aeb250c6424df18a42c14f0835e92d06819e4f47189a4dd219da6bacb91a35737c39f057b4d083107e19fafedf7b1f2664661aab71a5faf31af6993256bac3a82c6d8336015daed1e0da8f228a51588462de6d3f00b638f99c04895eb89f5e0378eda2ba289361c553bc23b36ea19d1f1bd83cbec18e8147099abef8c095fa4283c38aa23ffd199898efa2a3828fadcbcf49aafd0fe804cfda22a7cc24725925c02890184d6aa0630f679c4902ee635f4282a2f8b62f805b9e3a3c26bf5ccf51885acc83a589d19b9664cf042f26db20a3a4a38dc1642555f314e74a9c2c393a4ed023252290616805ff7547eab61f05c6943e0ed615d859ceb38b34ee4122cf0a10ffa9af6a545c829e6e457302e1d44d316a4b73ba4b4068cb5899232fa99b010ac305a1e3238d434963944afb7ecd252f5cc622c75cbac20aa588d4a8e5e6b4a9f7ece0ac8948b13f81aeaed6ecdc719e6c349a5cc174341b3182400a870f24b439b2e5a26483811abb6c83da930fe50a354c85d9c1efa037fdae7606aaf39d008e390b3c7daea36ac3dcec014ecc271869db59f0d3a7723931d074e8a421e08d8cffe7915b5b1309043a66190585a4671f9383c1506d2d534eac5d37f39229ab6a1c277dc4b95f7ace62f1e835fde72516fd2d637da49e328e54876247d9f47a6542ebb8d002003bf137d97c543cb7ca0ad93f8670b22a4fb6e0bab180aac0b991d9838bc61949f9ec35d1b81f7e68d8123395a7234a31357d5bbd4bed741dc92471799f397f246f14f12b03022ddbc2682bb25770dfa891fab62e2f74ab1d16986543ebaba469cccaf4451afb658a2722bdbb87376055f533641ee2409a8ec165af818be704368324666c6e1109ad73fb524c32747e5eedc67587b94e1049d662ea1c08ea40089a36dd29962c0e5ab7abffde053097a43d9d1a97b0a97b3aab4e6b3808c2b481015bbc22cd6d06ff4ecc8cb6208af7609d68bcdac41c7e7246214827e486a3295106bd4efb560f6b656a2caba8c4cd541d728ef7eb2bb9c071c856fb47fc169340d611e4352e16239f77742bf088ab24a70815aa32a1156448e25744dfe97f19c799b8cf1e10c32d62b2480804e76553861fab91a10aa7d8345bb8bd6742baaf013aac82996c9019c156e6d69ef42d940bbab01d653d50fefee88abb14bf76df1dd8e46c4d343b405b246f7a1b457957f500b93567e9057589d0d22710e3b9fec43ba666ffb78dccf80dd869cdcc4fcf8e1d4796150a121371789d3570c0b7c7c28111700586733fa59c85b178c2ac4aad220a860e7ce1b851a48cac674ee1d725ec4bf0838d1b1aa7dfe8c7fa7df6cfb3839cc6aadc91bb3900b12e1aa40c111b09ec976ed40288a892a621e8d427db27ff7dc3f8eef30ff99f76692856683717fa5f9046b853d12a4c2246cfef6f50c4114bfa88570ea3af9e5f05864c9bb529e26f2fafb8467c84db6519954d16d26874f6f0c2b13a6f987fd9c6cdbe46df21e81094c79ef1cdef32891b3b0be0ed3d56c20fc973610a7e04429ea7a0f5698543942d72a1f51a09d827102cc6eac596fd9396edf8f5f5d234a8fa41348e73432bd27254e552de88bd65794b5a15ef7c1ff8f25474d457f06a8677a34df0bfe37f484b9843e5d57b9c2af4a64f6849c278b040e5b1a489d80be0705c1d2c7914a2682581730708db0e6013e3c8a4d60b8a0a", 0xfe0}, {&(0x7f0000000600)="1dd8ea92aeaf0c28ddc111042813f00749abbbf97e7c99c0fba6d432920f39c1f2fe1f95852a08837070ac813418678f565d703c5480907dac381ee5bc334b2d2b8d9ecc034aa0397768d825c2f246d21ca0dac42a818b9a126452b0e0fcbf805e6295452dd118529e21c44f3af73de0960082f22f332752c59c719bedc7", 0x7e}], 0x5, 0x0, 0x0, 0x800}, 0x40000) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r6 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x200, 0x0, 0x7fff, 0x0, 0x1, 0x70a, '\x00', 0x0, r9, 0x1, 0x0, 0x5}, 0x48) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0xca, 0x0, 0x0, 0x0, 0x20, 0x10000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x40000000, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x8804, 0x80000000, 0x5a, 0x5, 0x0, 0x2, 0x1000, 0x0, 0xffffff6e, 0x0, 0xda}, r9, 0xc, r6, 0x2) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c09600000000000000008500000029000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x100a, &(0x7f0000001680)=""/4106}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r11, 0x0, 0x96, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61170800b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x3, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da951", 0x0, 0x9}, 0x28) r12 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) (async) r17 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000016c0)="60664770d8b2daae9711fe302be77aca", 0x10}], 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000", @ANYRES32=r13, @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x89a0, &(0x7f0000000080)) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="4f25ca4272e2d1cf16b9490adccd5c3e2d4cd7f2b83b8af96782df6a98099b126e52090bf55d01000048416f5dd3e3ece03c565976981890144fb251c21ed50a8acf7ea3fb2ce01b45c7b8e4d4", 0x4d}, {&(0x7f0000000700)="732d6d60f80ce0b4a16b60dfea0eaf7a193cd574f0327389d1c110c543ad4cb183a126f23c3d4281b3bab3ec197ee34e97212d280a9c1628e215d6fbf845a0b189607ca5c77e96033085fb4edac48cfeec2e6a0a7ae9876a791ea13589b40ab8843f9e626b8eb90c10a075152b28fda0b6bb824238d64de9517e4707aad700a7ca1fa8f5665a9e178bfd14114a25be177a", 0x91}, {&(0x7f0000000800)="356834f34532694814ab13a283fb69b0608b1fac85d6d81332a02d4e4176a771a9cd5fa16a317e8c7ed192d2ced89b3365ca83dd2b4c3f8f215de93c46021b7aae", 0x41}, {&(0x7f0000000880)="4322dc9192c6e5d335f2a76bd3fcfb6348a3bf478bd6b73893782252309bcbbac1383cd512022eedd12b2ed8d57bd2b04e13a418ced6639f9470c9f296648ac241422ee0cba9631309f8591b72a61460c3d51965d2f023f21a592500523f9f7ad8a2c3a86e3a7618eabb7ef0701b2b0c2e318c476e09471d124152674362a6f75742bea062bb3b1f918fcb57715f011f4ac0e2f1500cb181eca9e90845be5ef37e58671f8986e64a36760f1ecc3ec20c22d73d9bd2a9702476f6b6f6d0d102e57590207b8e58372b8d6405646c53a88a6f33e804b0f8edbd13ebdcae346a6d30347f93b753c26f0c4fddc8efe5878fc82b41754bde7a1be545cc", 0xfa}, {&(0x7f0000000980)="b38f29bd7b4eafc6b4f179ecbe2291796241ecc53cdcce68bbd9e9506f42cc36156edd3417ba789096b38494d2a66e2923540744bb9fbeb57d9a3888e49980e2e17030b1257decdc3e33378280510549f0da22dbd2567e59c36bd64076585227535ab5cb24b50474816a3c2ff0ce1532c6c9703be8680655bbebfaba11aeba2eb39cdfc7e11ea6c55158de3f3f6a5c04598a880d2d3db7e5026cc5800d3493d6", 0xa0}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES16=r15, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32=r18, @ANYRESHEX=r14, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRES32=r14, @ANYRES8=r11, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, 0x0) (async) r19 = gettid() r20 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {0x0}, {&(0x7f0000001340)=""/74, 0x4a}, {0x0}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x1) sendmsg$unix(r20, &(0x7f0000000580)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="733d109fa07de36a0a3da7b7d00178b5c68495313dc7274e1287f66b86aeb96e8f7640ab797d516cd67e51acc0694d43f8f19755c9ebebb3221d69cfd1c5efa4f9867a42bdd7b932ebe07158bf242ba808c0ccaf8eba5aa6a49de335381f", 0x5e}, {&(0x7f0000000440)="a06a834d5cd9b84dd504a7a4f79804f66262393452b200c05af4db7f6b66a8aae0c630d8297fa2902c9c09dd854a8e6539d4e132ee10385fd4c534492319d6eb9a24b3d48f69497ab745fd19bda68be714fc5a0b8fe4ec14206cb35e0f0df78f3b1f229eeb0eeef010cae0c25d92c6b7c552ddf442e8906b7500b1", 0x7b}, {&(0x7f0000000200)="10", 0x1}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r21}}}], 0x20, 0x5}, 0x0) (async) sendmsg$unix(r9, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001e40)="fbe71d6f3d8e8370282bc2b4adc49e973d083fd01c95b74523210337d4aa4865c88033b45ee38265ad26cec2a044bad281022dbc5fa8ca61d9989f0f1b15eb71b92299e567203f28de84d6264a68f1bc88ea39350945369bc418bc4d9569317c538a71b8093b95ce512b9278c717c12324237a6138790de02c58030dd0daf47a08b328862b8732f94a3f483a80d0288976cda096ea6a7c47d5855fd6d1e5b0dcf2b9c249a7f334d09cd1ac5455523d010b53af9be9da1ca73c434b01698e67884baa3063f91a94bf7a1f495f545a651d4965a86804de7b80632e2b0150264a1e11f13586ece7448a2bd3b81203a2ffd78d1b99be3a14b6d37dbeb2d5bb0784d38c03543e795cbc4b07ad8350192b0068551b0221b137972c4f069008d5ee18a317e4a740504a341f564a0a7e7db1713317d0348e19bdd01d1131836fd0fb47024822d3d7983bb6a0e5057b3b5766e01212c5ae868af9e255cc2caadc5d71ff742004b8e698fdaddcd7e361423dd8f78d94ec8f63a6bb0bca22ce2081100c40c990ed3ff5c37ea0d662b3e82700787577c1f540df2b2f9fc90424210ddb292b87d0153320de0ae52b12fcd51d37ff04802e4f0128b7bfa56a230943a0262feaad24a2ca5302e1fd6850b96e3233858938e54df371f99b7e640da1baaf1bb755491a98a3c958bc7d5fe233e30c1f2ab9a4981b75d14fe7d09e28e90d769d89202e8aa5b83cc8cd1d987d575a07a337acde2153f103f6d2ccc2ec8ba35f80f5b25915b6fe7fe00a95703941c02e057e764acfdf7113930ce589384864dff8dd268cc820e0c81abbe5b1c530b10e8940b74b740cb09f4f92a35f23839e18b86206dcfa3034eb140e6a0b818fe058a0fc083d7c60d4d47b4f42d0feda1b36ed863dc00dc7a0ed462921b9f1f090c0c6cadec1cbbea99f9e8de0796f02c3033cebe92e9a5bdaa8006b577e4eda4b6b76cde5b4720a4a3d6515a6a943ce496b87697c570b9f080a634d8df696b6810ab7e7530fd19e0303cd0fc22ac053c63e0d27ff91eb0ed41ef92c94c9a356db3b7f4441cb16bb2e8d33d50353e5420ab5f2cf07ac5d5b651dc583b76d70d43d63c8db8b2b813941a117e4755adbc959c3960bbff78852b7ea1d8a9246e136eaf8b9e513fbbebd1f025d5b8bf89e654310554f9d873c05655dfbd897115cf15a6881f8b5b3a861de1adcd18f637078056d150e13434ec94a2afb0bddaa0da6d3b843b9ca5cf7fd51e623ab3ab9111198b646b89f1f2124a0251faf6e991b095998e85eb955904255baaa174732eb746061bc0dcc27e39e9542db542ec57eea3d1a691dfefcf448e165a1e3c124aaf9b6a9dc754106b82af0e23a13f17d8da51187437ff610449a03aec66f18afc5b6379116f7b1e3fc1194c7826de625dda87ac7b6829fc1862cee004e98f699eec563b764abcb11e04adb0d981800154fbb6041b4f65035fb5e831ddc6beedb76b3746393b388afcd4c8d4483154cc5134afc8c491f43a4447cc4b1859cefa0e89be506b00f2e2e94628678bedabb6d2c8271623b0ff435a3b2d6b444cb76bffa6a67f8f2a1264059609ea6e8fa690cbaca7fa9a4c2ec35973fcc41fcc8cec936b10554adf613df12f67c32f0b91c74fad1409d34bc036efe923734310439a7e180e852760eea8175700a707590c80c629c82eaa273594133943ee4d47eb451481c03f67c70faf92d2934f5730bee42b48b5157a5e4b2be668dfe6c327de4ef58a8dbfe0e803f04d7e58849d8e72909a05677fd5bf5b97ca1a6b0335562e75527a0acb7b3a0b13a1c61d4ee6ba51645743930d9854a5f3d1b2b8741233ec244e39926e7aa304e5cd50368e76a69628491f7bd2c4be6c25a4dd1505b53453f0d19da880ab448b12fb2189bbdde1a6693f6c4d6654af1da45e9c3efba4dc12ea1b03638633242bb519108cf9c38fc39e69438cd30d37dcda87a9a02b58b5e5544d6138e15b463b975874f2aeacc8f0fafff21aabf39c1f1d19d31f8d98e7cb2bbd93de196edd244407464f0320cc81595983ce96a4b2cc192e3538be74104f33885680998f8b5b7a70b7ebe3af0b129c2f81cd446b047cdf2f67e0f57a1adc4ff544c41980f4404d4e306b21d1ca016fff9b240c45dc7d6d0472d9f33601f1a147d00b8340b281c9d1b37e88b888327664065bb16d5b29da682fdc676d12dcac13f2be20c4fc75018670c0ec15415bc4fe9f5216a67a14092f6d8b22f568219273bc989d324fcc9be6be298d2c8396a1db694a23f8d5409385ca018e955d4b354585a7c3b101603bb8fc5d188d34dd67e5c1078ed5a8377b6b01426ab0726d8af9a089b61e35c2c9af407de85cbd824688ed3a0d735f807fef14b01af87bc2ff74be5275ace68ef853324a9b6b449eadf3e4ba01da5e108e8f24b1935fe838810000034db0c716c1af381fa74e2aa11ad030411ad5ae4eb4fe7d8bfbb02bf7b5f73fe70823cc326dfe872b00011bd21bfd194e9765513b302671b3ae4215548f77fe104b7d248494b41529d14c3292c7db100eb5aa8646a4f32591cbd0a3cd57083435b3787cfabcacfb7f33982c06f7f4d908288f10286b6a56678403e390514f7c5f32feba6a618787f218a167f8cba7db2c6e5c9dd796b651c15ed34b08f92be624c55e03e8e2699318f848f6c1a288e8834018570531fe71706f4c79691ba1883f8231da9df4cb919fc91156aab69a75735e747a5b67a6c446232cb0ae53e4317dd5520e728ba178d09dfcaed4f26bc224a724ca9aed84923dff678e2eb9a1576afd25f613399f1c1e75131386a1c49cd300858d91ae6b5f63785d237efe8c1911ac5101459739e11c38c4b116f7a811dbeaa442e95c411e04c3e7cc379fbfdb32bd74999532766574e47ad37ebe134694c4fe394db2d9fcc3adf19b762b1e6bb99e30f5f0c76cdf1930c6e33ffce8d588a0c7e54c1a149df0f94e746c0c4cb8f2892cdf5d769bd588395e15438fec6388951f7c177ed4617b382aa319409ba36e7d20ee57b94a24ea89d715c16d0f7797821077ee5112360a761b15a2e5953709584c9d688bb2bf5d85b0983e57aaf39ed60c45e3cd6246c4853132f91e632302b59e31164225c04172b6c36279bd2e5576aa92a1f845b30765fb47e41a880385d5b8850653e9e1aacb2444e6147ab8e630956d717e3ae176cef7809e70425e42f136484740eee947b025ef7a07ebb626950be18134bbea0c14a497a08ba5fa8788d1233b4c8e8bb97018866a2b7479dd0d1b851824572808c4dca3548ebe1694459c14fafcfae9a411c8a2b6566b6f768f4c8fbaff34f8dac95ccea9372cdfedbc7cfa534a914fadf205208069159b5057da580f73e84f83ca5ea294cb8dfcbef5c9a410db83fe32c76acd6af450aa6908f367935adeebe0bb3da47cc9a1453b000f1b249b4c916992a2221d97bead5f986864f8d2d21a43616940e97dd40a369d8066b77b45546f65fd29fe90f99f916f5375c7dc93f71f24bdcfbc8e5fd1f3b38a93850b9b6ebb406cccea6cf31b439e3cbdc6f4c55a40e7348d50979cba4b181b33523d1fcaaa8825923738f5c5acc76b81bfee05351c6460c4335e49698b78937e6d32ad8c87f8b3899a1c4ddaa1bc537c10cfdecc7b20fe37300b82df6702f32ebea74075ad1be85345291b912719c32db3564c5e5201354791426f8d0bd7908226e4e05121af8a73b6414908ca81ff66469468a61395be4cc040345848c4e17f9a85e95d23fe9ddd60a81212c1ad2f0756ead8579c3462e0f889500a489a0ef42ef039e82cb79e7d9155af29e5f2f54b2549293d8ab8071e2e6a50a1368c67c5eb94a85a53a176bcc0c5d16caf4619a7e58bdcb08c9a19167a9a44580cb24dab2f11f17e80f63a7f3ccbf5f764043b68e4a73195e4c6660fa28f940c73803b954989b422dff18f62e4fb8b3b80476dfef0b483e45fdbcb1eb09a6c088b3b0881c3e5ae56a7c327c34df08c9ed0261b4566b2f5b4f2733097a4121fc3b06a4159cffaa18997af65e45bbac479100c6064acf998b74494ac86c397776e825d621a7ea23f940e87e0af4f8cf8861207c921c6d2deec65d6373aff6c4bd0819bb53aa2d52012162c1c186834ba0155545a09a3f1bdf221f0a1f25c1ecea6585dc229f441d47c6964d7193753e8d6998519b9e363e914b1898647a4ce358cd662ed4895c698d73f9fe8977743f5a10910d47749c3d42c24b2441b885ec2806268ea2a73697a1f77f757740acb44ad50f019d0f60e0de229be9aa748de0120f7632f50043138ab3886f883a7612cf3a4dbf524681ba3f784493268e0c905b1d910be157a3618f34a4d05c9afaa39fd67deb0c05e67dccd7b6592e451add270526ab9a0410211a1056f302b04a73d6361ed28184e9554f260cc3cb67be8650f812b3fb2a1ccc4334f6a36d3bfb96d2425fdef11f883e74bf87f5c240d88e6840eb5862664646f56e5295fc1474d36fd9cd517c5fa81a1ab3314635c23fb142114588318a0e4675b0e0a43f71b77bfe5b02b8b85704090368d9eac786b96d0f4be3a17409ec3b51ab43bfd3c88fdc6f00ec5c933ecfe7cac6ceddca8e7bb9c3e75fa807efd2321081ab28fb4b39a71843d916041154bb11643dad8400d5ad58d376fe448d12ff62aa9c82c2c0cf7f7e723fcbe54a93d7ec3633f9516edf81253700ca1d0b9107607990b06032ec225a507e2b893a146f6958d63538063e40236bfa579dfe25fe65db3b5e4cfa0479546848dc3ae478297f6776b6ed2aa98b3a0f39d8261a1f2c824e3e03f21b1f723f546ff2a307735a1141f1a88e77e2bb1e86f2e7fb2f7a6da9f1f20429a148a27c6ba19faecd95a1961ca25c103e35710e757de3ed7c0ac0b395aa8f8bf16e864242d74cd200239ababffaa81178e92d6323312360a27bfd4aebe6e4dec05542ce30c776bde236db01ae0fb76fc98d4ce589bb4006c191d0082d8890644ed91ccf192dff43460ab154308bca4ebc38230c9e20fbb6482e9c81a7b2af40fa3f6317f025119d7acba44b7a4200fc0fa4274de5a1145441b4204ae534bd70c6ad3a91b645473eba49d3c9ab9ed168e61f152880df21d2bfd2b666e9ce4d76e4ba8916326d9867fede032000c5e6d3d9da1789ca9a3edc7df803dc07d6fff1643d79c588ce8c1ea8d45fa4c7e26591feab7b8fd05f51494668028fb6124e42891a81929b71ffece1ad47455f4a2149447f6fa7a2163ca3beefafb1ec0fa40c5ab10ca82c47ff67d7d159e6bf5975f64a78bf7f55f6d276efcd67cfb16368e40d0ebb70c2022342e8e0f0bdd1e0a924b74fbe82ba8829dc04282b4954440ccbe49cfc26b3da389fafdbac843a73bd53a3ff1c2d14a15e8a518c806234d4ca3c0538367f0f57d853ba5231045b927935fa674eaefa92991a89b51c4f8f3a15c98ceb13283a41345323287fe619c2ff4beb807122f15f4c3610ec5a5475d3991da28d38590197e432277be31aa496534e4c92135c8c31b1257afd41aebd8387a7a259598ac9967f896f54e4391001286ed1e562b0c552ec98afaf34d9357743987e2106cc0dfbe88b5eb5d25b65eb4a5481ca3dec8cf30ffe11df132280be971c4ebed3d7f07f50201ce86e1728a3fdcfb6e6ec1be2056d19870353a825c34b9116bcb713ee4799daea49dea9c059f2dfc6c92c4163aafd53bd568ae2b0d6094b6c5acb29245937f771a6bf47ebb0544b0155ab72a496c8b4aa6f8e412ec9feafc22a425e0461745faeeb47405ddde64325339b5ab132b77bceb79c", 0x1000}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xffffffffffffffff, r21}}}, @rights={{0x24, 0x1, 0x1, [r4, r8, r10, r5, r9]}}, @rights={{0x18, 0x1, 0x1, [r4, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x4044080}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000180)="794f67c500c604aa6bd3351db345fb4a1907fd2f812bd1986ee0b4c5ed13409b57face8ee09e22a1d1e258eda26dc463a74a12", 0x33}, {&(0x7f0000000280)="d6d16e755f17510c086cbddc4eea637ed028a473ac1ba1fd78c58241e62b7277a3753659e188b0fee27977522705b55a7a093a063c31f6f53030c219e4fe26680d4292fea669e0cbdfc7918db18de2e211c380f9526946beb022d9546b79a6661fc1f5bd1e74e219f9f37034c336477ddeac8157847526a2cbb3e44a4feea05c8a648e0e7dfdf90128c87ab1854609c450f6c99e92aae06a5cd2eb69d430", 0x9e}, {&(0x7f00000001c0)="de6f52ec9e2e60fe72f2ff95721d20893dc4", 0x12}, {&(0x7f0000000340)="b65c27e3e8038c479cf07cc9f4533f", 0xf}, {&(0x7f00000003c0)="36a82c20db4ffc51e771eb5e725e239559c66255b5f87bcd6d574aadc896ef3ea06a2a19d7e6fd75cb314c9ee1fe7f229ffd356f61e8b9e673bbac0262ec8dd65f52995cabae5ab35d6462c2", 0x4c}, {&(0x7f0000000440)="ddba4be24c0d5afd97cd37103c5dad79cde3b4b3cc68c2d7f40247984d203c2d0482d040d8f62e9097499056ffde7db374fe22eef93aac7426e9040f130e9f668fefa4604f52a8a8cc5832d7a59bbff03ee9edd986d8d730d34bf6be363dc4f80d1a07cfff6c8a2c73dc10867f4ec1", 0x6f}, {&(0x7f00000004c0)="7a91270c57708f89d0e2623cdac58a7f71327f1f", 0x14}, {&(0x7f0000000500)="98b294f1e7c96e105e84d4753e9cc7710c716745884a0268ac5f01936feb2a19e4586eedfbd57f78f0c42e39e0297939b1a2b3d84368ac68f4c14019bc79b910b318934393137f4237f53f8c01727ded9203ccabe813671a2bf908d3c1fdf89a20e6c65ed60b92f859a11e45be096cf46958a4f8307ce67f8d33bf26575bd7c6687798bda19b5a5110339a49120d200142390b465a11f37517fcbbb1fbeaeda98c70284d130e4f6da0dacb0e66d6cdb3391b73aeed80ea77d8a56d00b2c54b4bf8577a6e2a60ac6efcad80af3ab526", 0xcf}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="1a2b789a3d66badefa8d09374cf4b1053a04313a09a01cb8379783893e511be1d070dbebf245abc86a502695b92e37d316f54064b9b52140d0ce229a59a982e130dd2933ac9549b360508bb5cebd896abf46a64b6d710d0cbdb1", 0x5a}], 0xa, &(0x7f0000000900)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r2, r0, r0, r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xf8, 0x800}, 0x4040001) [ 2068.634903][T18286] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2068.642704][T18286] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2068.650514][T18286] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2068.658328][T18286] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2068.666147][T18286] 05:20:36 executing program 0: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000280)="3fa31cccd1914dc67d33d4bad9c0e2ded9a44919144305ed4df5901eb1b816368d2bdd4f0c066143f58abcc479f3779dc316e6df4f37c8f7b2cb89a373878da44857af6c83fd6f7093465d14ee210ac8d1df4b53d33a734dbc3174d72190e67b9cb3a821ce8fd23a1477ca4bad5d32ffd1ac779314e2d7107f7879e0e16c14c39e1563c720382784d0c60e491b161d9c2b62db6d9936494fb5f33c2f078e3c27895e987c7079bd82f989cdcde6560d0b9a59bdaaa3014178a5c7943312522182735624e72bc5447925f1cdc1409fdc89960df9328ed2ca7744ca10340d88e19b492ac13dc0a497c0e45ba26e679989b6", &(0x7f0000000080)=""/113, &(0x7f00000003c0)="e7bbcd8ffa4b514b5e5eb6ab9938a95e02b3eb837b759c5317a573e1c5036f5f39eb9e192543ec624ec98c53f44de0c18001299c00ba117356311b0ee1114949377072b612252816c699d88a1da19ed3ab7807dee86207c36b7a7b94dcf3ebfbf42379ebeeb99aca10fadf17dfa94785e03c", &(0x7f0000000440)="522d0752a2697769d5661b557f9d5039307c0a54879c79b387fb7385695ee0de6f12bdc1ac09fe4474635020c8e408cd2b2127f2b4f5d75e472906f4d5422c988a48ad433dc5d513f06355ae13555a7c0e36e6319b1248ad794b25de7583c8", 0x8001, 0xffffffffffffffff, 0x4}, 0x38) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) getpid() (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:36 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) openat$cgroup_int(r2, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, r4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400), &(0x7f0000000300), 0x0, 0x8, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x24, &(0x7f0000000cc0)}}, 0x10) r6 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_config_ext={0x5e, 0x87}, 0x2040, 0x5, 0x800, 0x9, 0x686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4004662b, &(0x7f00000005c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES8=r5, @ANYRESDEC, @ANYRESDEC=r6], &(0x7f0000000500)='syzkaller\x00', 0x1, 0xec, &(0x7f0000001000)=""/236, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0x80, 0x9}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000b80)=[r3, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3]}, 0x90) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) 05:20:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 70) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:36 executing program 0: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000280)="3fa31cccd1914dc67d33d4bad9c0e2ded9a44919144305ed4df5901eb1b816368d2bdd4f0c066143f58abcc479f3779dc316e6df4f37c8f7b2cb89a373878da44857af6c83fd6f7093465d14ee210ac8d1df4b53d33a734dbc3174d72190e67b9cb3a821ce8fd23a1477ca4bad5d32ffd1ac779314e2d7107f7879e0e16c14c39e1563c720382784d0c60e491b161d9c2b62db6d9936494fb5f33c2f078e3c27895e987c7079bd82f989cdcde6560d0b9a59bdaaa3014178a5c7943312522182735624e72bc5447925f1cdc1409fdc89960df9328ed2ca7744ca10340d88e19b492ac13dc0a497c0e45ba26e679989b6", &(0x7f0000000080)=""/113, &(0x7f00000003c0)="e7bbcd8ffa4b514b5e5eb6ab9938a95e02b3eb837b759c5317a573e1c5036f5f39eb9e192543ec624ec98c53f44de0c18001299c00ba117356311b0ee1114949377072b612252816c699d88a1da19ed3ab7807dee86207c36b7a7b94dcf3ebfbf42379ebeeb99aca10fadf17dfa94785e03c", &(0x7f0000000440)="522d0752a2697769d5661b557f9d5039307c0a54879c79b387fb7385695ee0de6f12bdc1ac09fe4474635020c8e408cd2b2127f2b4f5d75e472906f4d5422c988a48ad433dc5d513f06355ae13555a7c0e36e6319b1248ad794b25de7583c8", 0x8001, 0xffffffffffffffff, 0x4}, 0x38) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) getpid() (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:36 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0xd1, 0x9, 0x8, 0x0, 0x2fbe, 0x322, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x40c0, 0x9, 0x80000000, 0x1, 0xff, 0x5, 0x2, 0x0, 0x80000001, 0x0, 0x800}, r4, 0xc, r0, 0x2) openat$cgroup_ro(r1, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) syz_clone(0x200000, &(0x7f0000000600)="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", 0x1000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000003c0)="7e3afd83025444e2a1cbafaf1c7573fd367355ada8d97f2170206882dae4659ed25f1f8427dc5c1436917cf4bc743f021eb5e789824c3880422d2a970fd07e8ad40e69f3e5cb475564a9ce12d6062e9c1444463f1e9f5559135652dcae7be7b2891c72fe5c0553973d07eb649fe10e6954d8fb796642d4bc2abb9c2c47e040bc55efc1d6a66ed9c7377270df0bbb48a62bbbf75d777c9b8d777efc984bbcfa3737a653d5c30a281670a98ba366b3ef3675c03a2ed0d5af57e5adb8a1fa0d99eec881b54570b19d114ad14a8620b50b3ebb466e99d880c1d885edf2828e82") perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0x0, 0x6, 0x20, 0x0, 0xfffffffffffffffc, 0x4211, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ef, 0x2, @perf_config_ext={0x4, 0xcc}, 0x100000, 0xfffffffffffffffd, 0x2, 0x8, 0xff, 0x835, 0x4c39, 0x0, 0x3, 0x0, 0xffffffff}, r4, 0x10, r0, 0x8) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2068.838184][T18426] FAULT_INJECTION: forcing a failure. [ 2068.838184][T18426] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.919733][T18426] CPU: 0 PID: 18426 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2068.931545][T18426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2068.941440][T18426] Call Trace: [ 2068.944562][T18426] [ 2068.947340][T18426] dump_stack_lvl+0x151/0x1b7 [ 2068.951855][T18426] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2068.957324][T18426] dump_stack+0x15/0x17 [ 2068.961314][T18426] should_fail+0x3c6/0x510 [ 2068.965568][T18426] __should_failslab+0xa4/0xe0 [ 2068.970168][T18426] ? vm_area_dup+0x26/0x230 [ 2068.974505][T18426] should_failslab+0x9/0x20 [ 2068.978846][T18426] slab_pre_alloc_hook+0x37/0xd0 [ 2068.983618][T18426] ? vm_area_dup+0x26/0x230 [ 2068.987960][T18426] kmem_cache_alloc+0x44/0x200 [ 2068.992559][T18426] vm_area_dup+0x26/0x230 [ 2068.996726][T18426] copy_mm+0x9a1/0x13e0 [ 2069.000724][T18426] ? copy_signal+0x610/0x610 [ 2069.005143][T18426] ? __init_rwsem+0xd6/0x1c0 [ 2069.009571][T18426] ? copy_signal+0x4e3/0x610 [ 2069.013996][T18426] copy_process+0x1149/0x3290 [ 2069.018514][T18426] ? proc_fail_nth_write+0x20b/0x290 [ 2069.023630][T18426] ? fsnotify_perm+0x6a/0x5d0 [ 2069.028146][T18426] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2069.033092][T18426] ? vfs_write+0x9ec/0x1110 [ 2069.037433][T18426] kernel_clone+0x21e/0x9e0 [ 2069.041770][T18426] ? file_end_write+0x1c0/0x1c0 [ 2069.046457][T18426] ? create_io_thread+0x1e0/0x1e0 [ 2069.051318][T18426] ? mutex_unlock+0xb2/0x260 [ 2069.055746][T18426] ? __mutex_lock_slowpath+0x10/0x10 [ 2069.060868][T18426] __x64_sys_clone+0x23f/0x290 [ 2069.065469][T18426] ? __do_sys_vfork+0x130/0x130 [ 2069.070151][T18426] ? ksys_write+0x260/0x2c0 [ 2069.074496][T18426] ? debug_smp_processor_id+0x17/0x20 [ 2069.079701][T18426] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2069.085601][T18426] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2069.091071][T18426] do_syscall_64+0x3d/0xb0 [ 2069.095323][T18426] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2069.101052][T18426] RIP: 0033:0x7f3c5e561da9 [ 2069.105305][T18426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2069.124747][T18426] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2069.132991][T18426] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2069.140801][T18426] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2069.148615][T18426] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2069.156424][T18426] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 05:20:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 71) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:36 executing program 2: perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0xad, 0x5, 0x8, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000b80)={0x0, 0x0}}, 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000079000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6612, 0x0) (async, rerun: 64) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000ffff0000000007000000186700000f000000000000003f000000850000003300000095000000000000002bc348dcbd81442b4b58450e0c6f4605f04f5343bcaf21fb8c8e3ddec7e273a5672036d65aa57d2a21187ea2aad35c097bcfd4d0fca739d9d6bd9199064e25295a60dc6bc539b1ad3c06ef98affeb3c353131761262b05251b7e02723792340577d16aab8630f2405df1bf8dd4b55f8fb9784e262e2d88"], &(0x7f0000000980)='syzkaller\x00', 0x1ff, 0x49, &(0x7f00000009c0)=""/73, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x6, 0x7f, 0x1}, 0x10}, 0x80) (async) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x8, 0xf452}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43405) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xa, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) (async, rerun: 64) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600), 0x10) (async, rerun: 64) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r1, 0x8000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="9500000000000000186400000700000000000000010400001800000001000000000000831a93d1009500000200000000850000004c000000c713400001000000"], &(0x7f0000000300)='GPL\x00', 0x7dd6209, 0x4b, &(0x7f00000004c0)=""/75, 0x41000, 0x10, '\x00', 0x0, 0x3, r3, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x0, 0x7ff8}, 0x10, r7, r8, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r0, r9, r10, 0x1, r4]}, 0x80) [ 2069.164237][T18426] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2069.172058][T18426] 05:20:36 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0xd1, 0x9, 0x8, 0x0, 0x2fbe, 0x322, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x40c0, 0x9, 0x80000000, 0x1, 0xff, 0x5, 0x2, 0x0, 0x80000001, 0x0, 0x800}, r4, 0xc, r0, 0x2) openat$cgroup_ro(r1, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) syz_clone(0x200000, &(0x7f0000000600)="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", 0x1000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000003c0)="7e3afd83025444e2a1cbafaf1c7573fd367355ada8d97f2170206882dae4659ed25f1f8427dc5c1436917cf4bc743f021eb5e789824c3880422d2a970fd07e8ad40e69f3e5cb475564a9ce12d6062e9c1444463f1e9f5559135652dcae7be7b2891c72fe5c0553973d07eb649fe10e6954d8fb796642d4bc2abb9c2c47e040bc55efc1d6a66ed9c7377270df0bbb48a62bbbf75d777c9b8d777efc984bbcfa3737a653d5c30a281670a98ba366b3ef3675c03a2ed0d5af57e5adb8a1fa0d99eec881b54570b19d114ad14a8620b50b3ebb466e99d880c1d885edf2828e82") perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0x0, 0x6, 0x20, 0x0, 0xfffffffffffffffc, 0x4211, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ef, 0x2, @perf_config_ext={0x4, 0xcc}, 0x100000, 0xfffffffffffffffd, 0x2, 0x8, 0xff, 0x835, 0x4c39, 0x0, 0x3, 0x0, 0xffffffff}, r4, 0x10, r0, 0x8) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0xd1, 0x9, 0x8, 0x0, 0x2fbe, 0x322, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x40c0, 0x9, 0x80000000, 0x1, 0xff, 0x5, 0x2, 0x0, 0x80000001, 0x0, 0x800}, r4, 0xc, r0, 0x2) (async) openat$cgroup_ro(r1, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) (async) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) (async) syz_clone(0x200000, &(0x7f0000000600)="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", 0x1000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000003c0)="7e3afd83025444e2a1cbafaf1c7573fd367355ada8d97f2170206882dae4659ed25f1f8427dc5c1436917cf4bc743f021eb5e789824c3880422d2a970fd07e8ad40e69f3e5cb475564a9ce12d6062e9c1444463f1e9f5559135652dcae7be7b2891c72fe5c0553973d07eb649fe10e6954d8fb796642d4bc2abb9c2c47e040bc55efc1d6a66ed9c7377270df0bbb48a62bbbf75d777c9b8d777efc984bbcfa3737a653d5c30a281670a98ba366b3ef3675c03a2ed0d5af57e5adb8a1fa0d99eec881b54570b19d114ad14a8620b50b3ebb466e99d880c1d885edf2828e82") (async) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0x0, 0x6, 0x20, 0x0, 0xfffffffffffffffc, 0x4211, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ef, 0x2, @perf_config_ext={0x4, 0xcc}, 0x100000, 0xfffffffffffffffd, 0x2, 0x8, 0xff, 0x835, 0x4c39, 0x0, 0x3, 0x0, 0xffffffff}, r4, 0x10, r0, 0x8) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) 05:20:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, r4, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400), &(0x7f0000000300), 0x0, 0x8, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x24, &(0x7f0000000cc0)}}, 0x10) r6 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_config_ext={0x5e, 0x87}, 0x2040, 0x5, 0x800, 0x9, 0x686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4004662b, &(0x7f00000005c0)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES8=r5, @ANYRESDEC, @ANYRESDEC=r6], &(0x7f0000000500)='syzkaller\x00', 0x1, 0xec, &(0x7f0000001000)=""/236, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0x80, 0x9}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000b80)=[r3, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3]}, 0x90) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) [ 2069.307086][T18528] FAULT_INJECTION: forcing a failure. [ 2069.307086][T18528] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.337822][T18528] CPU: 0 PID: 18528 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2069.349406][T18528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2069.359290][T18528] Call Trace: [ 2069.362408][T18528] [ 2069.365194][T18528] dump_stack_lvl+0x151/0x1b7 [ 2069.369697][T18528] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2069.375171][T18528] dump_stack+0x15/0x17 [ 2069.379157][T18528] should_fail+0x3c6/0x510 [ 2069.383412][T18528] __should_failslab+0xa4/0xe0 [ 2069.388010][T18528] ? anon_vma_fork+0xf7/0x4e0 [ 2069.392523][T18528] should_failslab+0x9/0x20 [ 2069.396867][T18528] slab_pre_alloc_hook+0x37/0xd0 [ 2069.401643][T18528] ? anon_vma_fork+0xf7/0x4e0 [ 2069.406150][T18528] kmem_cache_alloc+0x44/0x200 [ 2069.410750][T18528] anon_vma_fork+0xf7/0x4e0 [ 2069.415089][T18528] ? anon_vma_name+0x43/0x70 [ 2069.419516][T18528] ? vm_area_dup+0x17a/0x230 [ 2069.423943][T18528] copy_mm+0xa3a/0x13e0 [ 2069.427939][T18528] ? copy_signal+0x610/0x610 [ 2069.432361][T18528] ? __init_rwsem+0xd6/0x1c0 [ 2069.436790][T18528] ? copy_signal+0x4e3/0x610 [ 2069.441217][T18528] copy_process+0x1149/0x3290 [ 2069.445730][T18528] ? proc_fail_nth_write+0x20b/0x290 [ 2069.450852][T18528] ? fsnotify_perm+0x6a/0x5d0 [ 2069.455368][T18528] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2069.460312][T18528] ? vfs_write+0x9ec/0x1110 [ 2069.464654][T18528] kernel_clone+0x21e/0x9e0 [ 2069.468990][T18528] ? file_end_write+0x1c0/0x1c0 [ 2069.473679][T18528] ? create_io_thread+0x1e0/0x1e0 [ 2069.478538][T18528] ? mutex_unlock+0xb2/0x260 [ 2069.482966][T18528] ? __mutex_lock_slowpath+0x10/0x10 [ 2069.488089][T18528] __x64_sys_clone+0x23f/0x290 [ 2069.492687][T18528] ? __do_sys_vfork+0x130/0x130 [ 2069.497369][T18528] ? ksys_write+0x260/0x2c0 [ 2069.501714][T18528] ? debug_smp_processor_id+0x17/0x20 05:20:37 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0xd1, 0x9, 0x8, 0x0, 0x2fbe, 0x322, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x40c0, 0x9, 0x80000000, 0x1, 0xff, 0x5, 0x2, 0x0, 0x80000001, 0x0, 0x800}, r4, 0xc, r0, 0x2) openat$cgroup_ro(r1, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) syz_clone(0x200000, &(0x7f0000000600)="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", 0x1000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000003c0)="7e3afd83025444e2a1cbafaf1c7573fd367355ada8d97f2170206882dae4659ed25f1f8427dc5c1436917cf4bc743f021eb5e789824c3880422d2a970fd07e8ad40e69f3e5cb475564a9ce12d6062e9c1444463f1e9f5559135652dcae7be7b2891c72fe5c0553973d07eb649fe10e6954d8fb796642d4bc2abb9c2c47e040bc55efc1d6a66ed9c7377270df0bbb48a62bbbf75d777c9b8d777efc984bbcfa3737a653d5c30a281670a98ba366b3ef3675c03a2ed0d5af57e5adb8a1fa0d99eec881b54570b19d114ad14a8620b50b3ebb466e99d880c1d885edf2828e82") perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0x0, 0x6, 0x20, 0x0, 0xfffffffffffffffc, 0x4211, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ef, 0x2, @perf_config_ext={0x4, 0xcc}, 0x100000, 0xfffffffffffffffd, 0x2, 0x8, 0xff, 0x835, 0x4c39, 0x0, 0x3, 0x0, 0xffffffff}, r4, 0x10, r0, 0x8) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0xd1, 0x9, 0x8, 0x0, 0x2fbe, 0x322, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x40c0, 0x9, 0x80000000, 0x1, 0xff, 0x5, 0x2, 0x0, 0x80000001, 0x0, 0x800}, r4, 0xc, r0, 0x2) (async) openat$cgroup_ro(r1, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) (async) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) (async) syz_clone(0x200000, &(0x7f0000000600)="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", 0x1000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000003c0)="7e3afd83025444e2a1cbafaf1c7573fd367355ada8d97f2170206882dae4659ed25f1f8427dc5c1436917cf4bc743f021eb5e789824c3880422d2a970fd07e8ad40e69f3e5cb475564a9ce12d6062e9c1444463f1e9f5559135652dcae7be7b2891c72fe5c0553973d07eb649fe10e6954d8fb796642d4bc2abb9c2c47e040bc55efc1d6a66ed9c7377270df0bbb48a62bbbf75d777c9b8d777efc984bbcfa3737a653d5c30a281670a98ba366b3ef3675c03a2ed0d5af57e5adb8a1fa0d99eec881b54570b19d114ad14a8620b50b3ebb466e99d880c1d885edf2828e82") (async) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0x0, 0x6, 0x20, 0x0, 0xfffffffffffffffc, 0x4211, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ef, 0x2, @perf_config_ext={0x4, 0xcc}, 0x100000, 0xfffffffffffffffd, 0x2, 0x8, 0xff, 0x835, 0x4c39, 0x0, 0x3, 0x0, 0xffffffff}, r4, 0x10, r0, 0x8) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) 05:20:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) openat$cgroup_int(r2, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, r4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400), &(0x7f0000000300), 0x0, 0x8, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x24, &(0x7f0000000cc0)}}, 0x10) r6 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_config_ext={0x5e, 0x87}, 0x2040, 0x5, 0x800, 0x9, 0x686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4004662b, &(0x7f00000005c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES8=r5, @ANYRESDEC, @ANYRESDEC=r6], &(0x7f0000000500)='syzkaller\x00', 0x1, 0xec, &(0x7f0000001000)=""/236, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0x80, 0x9}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000b80)=[r3, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3]}, 0x90) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000), 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x10, r4, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400), &(0x7f0000000300), 0x0, 0x8, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x24, &(0x7f0000000cc0)}}, 0x10) (async) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_config_ext={0x5e, 0x87}, 0x2040, 0x5, 0x800, 0x9, 0x686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4004662b, &(0x7f00000005c0)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES8=r5, @ANYRESDEC, @ANYRESDEC=r6], &(0x7f0000000500)='syzkaller\x00', 0x1, 0xec, &(0x7f0000001000)=""/236, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0x80, 0x9}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000b80)=[r3, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3]}, 0x90) (async) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) (async) [ 2069.506918][T18528] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2069.512821][T18528] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2069.518298][T18528] do_syscall_64+0x3d/0xb0 [ 2069.522541][T18528] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2069.528269][T18528] RIP: 0033:0x7f3c5e561da9 [ 2069.532525][T18528] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:20:37 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 72) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2069.551965][T18528] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2069.560211][T18528] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2069.568023][T18528] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2069.575831][T18528] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2069.583639][T18528] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2069.591451][T18528] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2069.599277][T18528] [ 2069.629872][T18647] FAULT_INJECTION: forcing a failure. [ 2069.629872][T18647] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.649017][T18647] CPU: 0 PID: 18647 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2069.660558][T18647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2069.670449][T18647] Call Trace: [ 2069.673575][T18647] [ 2069.676353][T18647] dump_stack_lvl+0x151/0x1b7 [ 2069.680867][T18647] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2069.686339][T18647] dump_stack+0x15/0x17 [ 2069.690326][T18647] should_fail+0x3c6/0x510 [ 2069.694577][T18647] __should_failslab+0xa4/0xe0 [ 2069.699175][T18647] ? vm_area_dup+0x26/0x230 [ 2069.703516][T18647] should_failslab+0x9/0x20 [ 2069.707855][T18647] slab_pre_alloc_hook+0x37/0xd0 [ 2069.712630][T18647] ? vm_area_dup+0x26/0x230 [ 2069.716968][T18647] kmem_cache_alloc+0x44/0x200 [ 2069.721571][T18647] vm_area_dup+0x26/0x230 [ 2069.725736][T18647] copy_mm+0x9a1/0x13e0 [ 2069.729732][T18647] ? copy_signal+0x610/0x610 [ 2069.734153][T18647] ? __init_rwsem+0xd6/0x1c0 [ 2069.738588][T18647] ? copy_signal+0x4e3/0x610 [ 2069.743009][T18647] copy_process+0x1149/0x3290 [ 2069.747522][T18647] ? proc_fail_nth_write+0x20b/0x290 [ 2069.752643][T18647] ? fsnotify_perm+0x6a/0x5d0 [ 2069.757158][T18647] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2069.762103][T18647] ? vfs_write+0x9ec/0x1110 [ 2069.766534][T18647] kernel_clone+0x21e/0x9e0 [ 2069.770867][T18647] ? file_end_write+0x1c0/0x1c0 [ 2069.775555][T18647] ? create_io_thread+0x1e0/0x1e0 [ 2069.780415][T18647] ? mutex_unlock+0xb2/0x260 [ 2069.784854][T18647] ? __mutex_lock_slowpath+0x10/0x10 [ 2069.789966][T18647] __x64_sys_clone+0x23f/0x290 [ 2069.794565][T18647] ? __do_sys_vfork+0x130/0x130 [ 2069.799252][T18647] ? ksys_write+0x260/0x2c0 [ 2069.803591][T18647] ? debug_smp_processor_id+0x17/0x20 [ 2069.808799][T18647] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2069.814702][T18647] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2069.820171][T18647] do_syscall_64+0x3d/0xb0 [ 2069.824422][T18647] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2069.830149][T18647] RIP: 0033:0x7f3c5e561da9 [ 2069.834404][T18647] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2069.853844][T18647] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2069.862087][T18647] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2069.869905][T18647] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2069.877713][T18647] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2069.885523][T18647] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2069.893336][T18647] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2069.901150][T18647] 05:20:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 73) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:37 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x6, 0x80, 0x6c, 0x8, 0x40, 0x3, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0xc, 0x3, 0x16, 0x7, 0x2, 0x87, 0x7ff, 0x0, 0xb31b, 0x0, 0x4}, r2, 0x5, r0, 0x9) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x33049480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) write$cgroup_type(r0, &(0x7f0000000040), 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00io -cpu -blkio +cpu +cqu '], 0x1a) [ 2070.134740][T18769] FAULT_INJECTION: forcing a failure. [ 2070.134740][T18769] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.157093][T18769] CPU: 1 PID: 18769 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2070.168637][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2070.178531][T18769] Call Trace: [ 2070.181649][T18769] [ 2070.184430][T18769] dump_stack_lvl+0x151/0x1b7 [ 2070.188942][T18769] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2070.194407][T18769] ? avc_denied+0x1b0/0x1b0 [ 2070.198750][T18769] dump_stack+0x15/0x17 [ 2070.202741][T18769] should_fail+0x3c6/0x510 [ 2070.206993][T18769] __should_failslab+0xa4/0xe0 [ 2070.211594][T18769] ? vm_area_dup+0x26/0x230 [ 2070.215932][T18769] should_failslab+0x9/0x20 [ 2070.220275][T18769] slab_pre_alloc_hook+0x37/0xd0 [ 2070.225046][T18769] ? vm_area_dup+0x26/0x230 [ 2070.229387][T18769] kmem_cache_alloc+0x44/0x200 [ 2070.233986][T18769] vm_area_dup+0x26/0x230 [ 2070.238153][T18769] copy_mm+0x9a1/0x13e0 [ 2070.242148][T18769] ? copy_signal+0x610/0x610 [ 2070.246572][T18769] ? __init_rwsem+0xd6/0x1c0 [ 2070.250997][T18769] ? copy_signal+0x4e3/0x610 [ 2070.255425][T18769] copy_process+0x1149/0x3290 [ 2070.259939][T18769] ? proc_fail_nth_write+0x20b/0x290 [ 2070.265057][T18769] ? fsnotify_perm+0x6a/0x5d0 [ 2070.269573][T18769] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2070.274518][T18769] ? vfs_write+0x9ec/0x1110 [ 2070.278861][T18769] kernel_clone+0x21e/0x9e0 [ 2070.283197][T18769] ? file_end_write+0x1c0/0x1c0 [ 2070.287886][T18769] ? create_io_thread+0x1e0/0x1e0 [ 2070.292744][T18769] ? mutex_unlock+0xb2/0x260 [ 2070.297173][T18769] ? __mutex_lock_slowpath+0x10/0x10 [ 2070.302293][T18769] __x64_sys_clone+0x23f/0x290 [ 2070.306893][T18769] ? __do_sys_vfork+0x130/0x130 [ 2070.311579][T18769] ? ksys_write+0x260/0x2c0 [ 2070.315919][T18769] ? debug_smp_processor_id+0x17/0x20 [ 2070.321127][T18769] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2070.327032][T18769] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2070.332496][T18769] do_syscall_64+0x3d/0xb0 [ 2070.336750][T18769] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2070.342480][T18769] RIP: 0033:0x7f3c5e561da9 [ 2070.346733][T18769] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2070.366259][T18769] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2070.374510][T18769] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:38 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x6, 0x80, 0x6c, 0x8, 0x40, 0x3, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0xc, 0x3, 0x16, 0x7, 0x2, 0x87, 0x7ff, 0x0, 0xb31b, 0x0, 0x4}, r2, 0x5, r0, 0x9) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x33049480, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:38 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x6, 0x80, 0x6c, 0x8, 0x40, 0x3, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0xc, 0x3, 0x16, 0x7, 0x2, 0x87, 0x7ff, 0x0, 0xb31b, 0x0, 0x4}, r2, 0x5, r0, 0x9) (async) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (rerun: 32) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x33049480, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (rerun: 32) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) write$cgroup_type(r0, &(0x7f0000000040), 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00io -cpu -blkio +cpu +cqu '], 0x1a) [ 2070.382321][T18769] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2070.390126][T18769] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2070.397938][T18769] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2070.405753][T18769] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2070.413565][T18769] 05:20:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) write$cgroup_type(r0, &(0x7f0000000040), 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00io -cpu -blkio +cpu +cqu '], 0x1a) 05:20:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:38 executing program 2: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 74) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x2e}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r3, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x9, 0x76, &(0x7f0000000800)=""/118, 0x40f00, 0xe, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x1, 0xca, 0x573e558a}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x4, 0x4, 0xa, 0x8}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1a, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3d39}, @exit, @alu={0x7, 0x0, 0xb, 0x9, 0x8, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1a45}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x5, 0xb, 0x4, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x0, r2, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x2, 0xbcae, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[r0, r2, r2, r2], &(0x7f0000000300)=[{0x3, 0x2, 0x5, 0x8}, {0x4, 0x1, 0x10}, {0x0, 0x4, 0x9, 0x3}, {0x1, 0x5, 0x6, 0xb}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0xd2}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x2e}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r3, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x9, 0x76, &(0x7f0000000800)=""/118, 0x40f00, 0xe, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x1, 0xca, 0x573e558a}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x4, 0x4, 0xa, 0x8}], 0x10, 0xff}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x9, 0x76, &(0x7f0000000800)=""/118, 0x40f00, 0xe, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x1, 0xca, 0x573e558a}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x4, 0x4, 0xa, 0x8}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1a, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3d39}, @exit, @alu={0x7, 0x0, 0xb, 0x9, 0x8, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1a45}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x5, 0xb, 0x4, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x0, r2, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x2, 0xbcae, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[r0, r2, r2, r2], &(0x7f0000000300)=[{0x3, 0x2, 0x5, 0x8}, {0x4, 0x1, 0x10}, {0x0, 0x4, 0x9, 0x3}, {0x1, 0x5, 0x6, 0xb}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0xd2}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2070.581818][T18992] FAULT_INJECTION: forcing a failure. [ 2070.581818][T18992] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.638280][T18992] CPU: 1 PID: 18992 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2070.649843][T18992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2070.659733][T18992] Call Trace: [ 2070.662857][T18992] [ 2070.665632][T18992] dump_stack_lvl+0x151/0x1b7 [ 2070.670146][T18992] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2070.675616][T18992] dump_stack+0x15/0x17 [ 2070.679608][T18992] should_fail+0x3c6/0x510 [ 2070.683863][T18992] __should_failslab+0xa4/0xe0 [ 2070.688459][T18992] ? anon_vma_clone+0x9a/0x500 [ 2070.693060][T18992] should_failslab+0x9/0x20 [ 2070.697398][T18992] slab_pre_alloc_hook+0x37/0xd0 [ 2070.702173][T18992] ? anon_vma_clone+0x9a/0x500 [ 2070.706771][T18992] kmem_cache_alloc+0x44/0x200 [ 2070.711374][T18992] anon_vma_clone+0x9a/0x500 [ 2070.715818][T18992] anon_vma_fork+0x91/0x4e0 [ 2070.720138][T18992] ? anon_vma_name+0x4c/0x70 [ 2070.724569][T18992] ? vm_area_dup+0x17a/0x230 [ 2070.728993][T18992] copy_mm+0xa3a/0x13e0 [ 2070.732988][T18992] ? copy_signal+0x610/0x610 [ 2070.737409][T18992] ? __init_rwsem+0xd6/0x1c0 [ 2070.741843][T18992] ? copy_signal+0x4e3/0x610 [ 2070.746267][T18992] copy_process+0x1149/0x3290 [ 2070.750782][T18992] ? proc_fail_nth_write+0x20b/0x290 [ 2070.755898][T18992] ? fsnotify_perm+0x6a/0x5d0 [ 2070.760416][T18992] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2070.765356][T18992] ? vfs_write+0x9ec/0x1110 [ 2070.769708][T18992] kernel_clone+0x21e/0x9e0 [ 2070.774036][T18992] ? file_end_write+0x1c0/0x1c0 [ 2070.778724][T18992] ? create_io_thread+0x1e0/0x1e0 [ 2070.783583][T18992] ? mutex_unlock+0xb2/0x260 [ 2070.788011][T18992] ? __mutex_lock_slowpath+0x10/0x10 [ 2070.793133][T18992] __x64_sys_clone+0x23f/0x290 [ 2070.797732][T18992] ? __do_sys_vfork+0x130/0x130 [ 2070.802416][T18992] ? ksys_write+0x260/0x2c0 [ 2070.806762][T18992] ? debug_smp_processor_id+0x17/0x20 [ 2070.811967][T18992] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2070.817869][T18992] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2070.823336][T18992] do_syscall_64+0x3d/0xb0 [ 2070.827589][T18992] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2070.833317][T18992] RIP: 0033:0x7f3c5e561da9 [ 2070.837572][T18992] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2070.857012][T18992] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2070.865258][T18992] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2070.873076][T18992] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2070.880882][T18992] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 05:20:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x2e}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r3, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x9, 0x76, &(0x7f0000000800)=""/118, 0x40f00, 0xe, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x1, 0xca, 0x573e558a}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x4, 0x4, 0xa, 0x8}], 0x10, 0xff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1a, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3d39}, @exit, @alu={0x7, 0x0, 0xb, 0x9, 0x8, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1a45}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x5, 0xb, 0x4, 0x4, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x0, r2, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x2, 0xbcae, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[r0, r2, r2, r2], &(0x7f0000000300)=[{0x3, 0x2, 0x5, 0x8}, {0x4, 0x1, 0x10}, {0x0, 0x4, 0x9, 0x3}, {0x1, 0x5, 0x6, 0xb}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0xd2}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) [ 2070.888692][T18992] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2070.896502][T18992] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2070.904322][T18992] 05:20:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:38 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) 05:20:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) 05:20:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'io'}, {0x2d, 'cpu'}, {0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x1a) (async) 05:20:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 75) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040), 0x0) 05:20:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040), 0x0) [ 2071.145080][T19237] FAULT_INJECTION: forcing a failure. [ 2071.145080][T19237] name failslab, interval 1, probability 0, space 0, times 0 [ 2071.170887][T19237] CPU: 1 PID: 19237 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2071.182433][T19237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2071.192327][T19237] Call Trace: [ 2071.195447][T19237] [ 2071.198226][T19237] dump_stack_lvl+0x151/0x1b7 [ 2071.202742][T19237] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2071.208208][T19237] ? avc_denied+0x1b0/0x1b0 [ 2071.212549][T19237] dump_stack+0x15/0x17 [ 2071.216538][T19237] should_fail+0x3c6/0x510 [ 2071.220795][T19237] __should_failslab+0xa4/0xe0 [ 2071.225392][T19237] ? vm_area_dup+0x26/0x230 [ 2071.229734][T19237] should_failslab+0x9/0x20 [ 2071.234071][T19237] slab_pre_alloc_hook+0x37/0xd0 [ 2071.238846][T19237] ? vm_area_dup+0x26/0x230 [ 2071.243187][T19237] kmem_cache_alloc+0x44/0x200 [ 2071.247788][T19237] vm_area_dup+0x26/0x230 [ 2071.251951][T19237] copy_mm+0x9a1/0x13e0 [ 2071.255949][T19237] ? copy_signal+0x610/0x610 [ 2071.260373][T19237] ? __init_rwsem+0xd6/0x1c0 [ 2071.264798][T19237] ? copy_signal+0x4e3/0x610 [ 2071.269227][T19237] copy_process+0x1149/0x3290 [ 2071.273741][T19237] ? proc_fail_nth_write+0x20b/0x290 [ 2071.278860][T19237] ? fsnotify_perm+0x6a/0x5d0 [ 2071.283373][T19237] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2071.288320][T19237] ? vfs_write+0x9ec/0x1110 [ 2071.292660][T19237] kernel_clone+0x21e/0x9e0 [ 2071.297001][T19237] ? file_end_write+0x1c0/0x1c0 [ 2071.301683][T19237] ? create_io_thread+0x1e0/0x1e0 [ 2071.306547][T19237] ? mutex_unlock+0xb2/0x260 [ 2071.310975][T19237] ? __mutex_lock_slowpath+0x10/0x10 [ 2071.316097][T19237] __x64_sys_clone+0x23f/0x290 [ 2071.320694][T19237] ? __do_sys_vfork+0x130/0x130 [ 2071.325379][T19237] ? ksys_write+0x260/0x2c0 [ 2071.329727][T19237] ? debug_smp_processor_id+0x17/0x20 [ 2071.334930][T19237] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2071.340829][T19237] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2071.346302][T19237] do_syscall_64+0x3d/0xb0 [ 2071.350556][T19237] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2071.356276][T19237] RIP: 0033:0x7f3c5e561da9 [ 2071.360530][T19237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2071.379970][T19237] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2071.388218][T19237] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040), 0x0) 05:20:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) (async) 05:20:39 executing program 2: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2071.396035][T19237] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2071.403839][T19237] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2071.411651][T19237] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2071.419462][T19237] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2071.427279][T19237] 05:20:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 76) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 2071.492719][T19249] FAULT_INJECTION: forcing a failure. [ 2071.492719][T19249] name failslab, interval 1, probability 0, space 0, times 0 [ 2071.506602][T19249] CPU: 0 PID: 19249 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2071.518148][T19249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2071.528040][T19249] Call Trace: [ 2071.531163][T19249] [ 2071.533941][T19249] dump_stack_lvl+0x151/0x1b7 [ 2071.538455][T19249] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2071.543924][T19249] dump_stack+0x15/0x17 [ 2071.547915][T19249] should_fail+0x3c6/0x510 [ 2071.552171][T19249] __should_failslab+0xa4/0xe0 [ 2071.556766][T19249] ? anon_vma_clone+0x9a/0x500 [ 2071.561368][T19249] should_failslab+0x9/0x20 [ 2071.565706][T19249] slab_pre_alloc_hook+0x37/0xd0 [ 2071.570480][T19249] ? anon_vma_clone+0x9a/0x500 [ 2071.575078][T19249] kmem_cache_alloc+0x44/0x200 [ 2071.579694][T19249] anon_vma_clone+0x9a/0x500 [ 2071.584113][T19249] anon_vma_fork+0x91/0x4e0 [ 2071.588448][T19249] ? anon_vma_name+0x43/0x70 [ 2071.592876][T19249] ? vm_area_dup+0x17a/0x230 [ 2071.597302][T19249] copy_mm+0xa3a/0x13e0 [ 2071.601296][T19249] ? copy_signal+0x610/0x610 [ 2071.605719][T19249] ? __init_rwsem+0xd6/0x1c0 [ 2071.610148][T19249] ? copy_signal+0x4e3/0x610 [ 2071.614573][T19249] copy_process+0x1149/0x3290 [ 2071.619089][T19249] ? proc_fail_nth_write+0x20b/0x290 [ 2071.624210][T19249] ? fsnotify_perm+0x6a/0x5d0 [ 2071.629330][T19249] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2071.634275][T19249] ? vfs_write+0x9ec/0x1110 [ 2071.638616][T19249] kernel_clone+0x21e/0x9e0 [ 2071.642965][T19249] ? file_end_write+0x1c0/0x1c0 [ 2071.647647][T19249] ? create_io_thread+0x1e0/0x1e0 [ 2071.652499][T19249] ? mutex_unlock+0xb2/0x260 [ 2071.656931][T19249] ? __mutex_lock_slowpath+0x10/0x10 [ 2071.662049][T19249] __x64_sys_clone+0x23f/0x290 [ 2071.666649][T19249] ? __do_sys_vfork+0x130/0x130 [ 2071.671336][T19249] ? ksys_write+0x260/0x2c0 [ 2071.675675][T19249] ? debug_smp_processor_id+0x17/0x20 [ 2071.680883][T19249] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2071.686784][T19249] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2071.692253][T19249] do_syscall_64+0x3d/0xb0 [ 2071.696506][T19249] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2071.702234][T19249] RIP: 0033:0x7f3c5e561da9 [ 2071.706487][T19249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2071.725926][T19249] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2071.734172][T19249] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 05:20:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800c6613, 0x20ffffff) r1 = gettid() perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x4, 0x66, 0x7, 0x7, 0x0, 0xfffffffffffff001, 0x80020, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x40, 0x7, 0x4, 0x6, 0x0, 0x40, 0x1ff, 0x0, 0x8001, 0x0, 0x81}, r1, 0xa, r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x35, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000060000000000000000000000181100002709757c7ee39bd1c598d84608341671abacc1cf60506036bf90", @ANYRES32=r0, @ANYBLOB, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0xffff, 0x51, &(0x7f00000006c0)=""/81, 0x41100, 0x59}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00696f202d637075202d626c6b696f202b637075202b63707520c8c2ba535069e250397e5c4c298fb2890f07b4eddb9e1e9f3e00b433975f00810b4b4dbd39b826e5b2ffd7467efce1541808f6f2d87b9c082f3ae6ed57da"], 0x1a) [ 2071.741984][T19249] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2071.749803][T19249] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2071.757611][T19249] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2071.765419][T19249] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2071.773238][T19249] 05:20:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800c6613, 0x20ffffff) (async, rerun: 64) r1 = gettid() (rerun: 64) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x4, 0x66, 0x7, 0x7, 0x0, 0xfffffffffffff001, 0x80020, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x40, 0x7, 0x4, 0x6, 0x0, 0x40, 0x1ff, 0x0, 0x8001, 0x0, 0x81}, r1, 0xa, r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x35, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000060000000000000000000000181100002709757c7ee39bd1c598d84608341671abacc1cf60506036bf90", @ANYRES32=r0, @ANYBLOB, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0xffff, 0x51, &(0x7f00000006c0)=""/81, 0x41100, 0x59}, 0x90) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(\x00') (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00696f202d637075202d626c6b696f202b637075202b63707520c8c2ba535069e250397e5c4c298fb2890f07b4eddb9e1e9f3e00b433975f00810b4b4dbd39b826e5b2ffd7467efce1541808f6f2d87b9c082f3ae6ed57da"], 0x1a) 05:20:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800c6613, 0x20ffffff) r1 = gettid() perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x4, 0x66, 0x7, 0x7, 0x0, 0xfffffffffffff001, 0x80020, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x40, 0x7, 0x4, 0x6, 0x0, 0x40, 0x1ff, 0x0, 0x8001, 0x0, 0x81}, r1, 0xa, r0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x35, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000060000000000000000000000181100002709757c7ee39bd1c598d84608341671abacc1cf60506036bf90", @ANYRES32=r0, @ANYBLOB, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0xffff, 0x51, &(0x7f00000006c0)=""/81, 0x41100, 0x59}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00696f202d637075202d626c6b696f202b637075202b63707520c8c2ba535069e250397e5c4c298fb2890f07b4eddb9e1e9f3e00b433975f00810b4b4dbd39b826e5b2ffd7467efce1541808f6f2d87b9c082f3ae6ed57da"], 0x1a) 05:20:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) openat$cgroup_int(r2, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, r4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400), &(0x7f0000000300), 0x0, 0x8, 0x0, 0xffffffffffffff98, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x24, &(0x7f0000000cc0)}}, 0x10) r6 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_config_ext={0x5e, 0x87}, 0x2040, 0x5, 0x800, 0x9, 0x686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4004662b, &(0x7f00000005c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES8=r5, @ANYRESDEC, @ANYRESDEC=r6], &(0x7f0000000500)='syzkaller\x00', 0x1, 0xec, &(0x7f0000001000)=""/236, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0x80, 0x9}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000b80)=[r3, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3]}, 0x90) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) 05:20:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 77) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) 05:20:39 executing program 1: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r8, r8, r1, 0xffffffffffffffff, r8], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) 05:20:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (async) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758}, 0x0, 0x4, 0xffffffffffffffff, 0x6) [ 2072.059315][T19457] FAULT_INJECTION: forcing a failure. [ 2072.059315][T19457] name failslab, interval 1, probability 0, space 0, times 0 [ 2072.071960][T19457] CPU: 1 PID: 19457 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2072.083500][T19457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2072.093396][T19457] Call Trace: [ 2072.096517][T19457] [ 2072.099295][T19457] dump_stack_lvl+0x151/0x1b7 [ 2072.103818][T19457] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2072.109282][T19457] dump_stack+0x15/0x17 [ 2072.113276][T19457] should_fail+0x3c6/0x510 [ 2072.117526][T19457] __should_failslab+0xa4/0xe0 [ 2072.122121][T19457] ? anon_vma_fork+0x1df/0x4e0 [ 2072.126721][T19457] should_failslab+0x9/0x20 [ 2072.131062][T19457] slab_pre_alloc_hook+0x37/0xd0 [ 2072.135841][T19457] ? anon_vma_fork+0x1df/0x4e0 [ 2072.140436][T19457] kmem_cache_alloc+0x44/0x200 [ 2072.145038][T19457] anon_vma_fork+0x1df/0x4e0 [ 2072.149461][T19457] copy_mm+0xa3a/0x13e0 [ 2072.153454][T19457] ? copy_signal+0x610/0x610 [ 2072.157879][T19457] ? __init_rwsem+0xd6/0x1c0 [ 2072.162309][T19457] ? copy_signal+0x4e3/0x610 [ 2072.166732][T19457] copy_process+0x1149/0x3290 [ 2072.171247][T19457] ? proc_fail_nth_write+0x20b/0x290 [ 2072.176374][T19457] ? fsnotify_perm+0x6a/0x5d0 [ 2072.180890][T19457] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2072.185827][T19457] ? vfs_write+0x9ec/0x1110 [ 2072.190167][T19457] kernel_clone+0x21e/0x9e0 [ 2072.194504][T19457] ? file_end_write+0x1c0/0x1c0 [ 2072.199194][T19457] ? create_io_thread+0x1e0/0x1e0 [ 2072.204051][T19457] ? mutex_unlock+0xb2/0x260 [ 2072.208479][T19457] ? __mutex_lock_slowpath+0x10/0x10 [ 2072.213600][T19457] __x64_sys_clone+0x23f/0x290 [ 2072.218201][T19457] ? __do_sys_vfork+0x130/0x130 [ 2072.222888][T19457] ? ksys_write+0x260/0x2c0 [ 2072.227228][T19457] ? debug_smp_processor_id+0x17/0x20 [ 2072.232431][T19457] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2072.238336][T19457] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2072.243804][T19457] do_syscall_64+0x3d/0xb0 [ 2072.248055][T19457] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2072.253783][T19457] RIP: 0033:0x7f3c5e561da9 [ 2072.258038][T19457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2072.277478][T19457] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2072.285725][T19457] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2072.293545][T19457] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2072.301349][T19457] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2072.309164][T19457] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2072.316968][T19457] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2072.324794][T19457] 05:20:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0x73041480, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0) (fail_nth: 78) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 05:20:40 executing program 4: r0 = syz_clone(0x42806200, &(0x7f00000000c0)="2e293f4a911b1e27c178", 0xa, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000003c0)="ccccbb0d3fba17a8dbe9dded9ab603b8ac15041bc9dfda8f69676116734af3c2885d59e170fcd02f4f091e1184ae7697893b109ebb1c42e677a03c5ba1134dfb463775faefe94f1dec1fc784626672036487aa5183c4f2caa055983928fdd70fe87e5413dd389175ef595102453470af256d3758d2dd80a543892656c35480f39097e9373300fb036b8d123a05b2ceb91976f4b7513ad58b12b97f7f5c3b346245f647f325c1d5c6fd3598788c") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x28, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x3c, &(0x7f0000000d00)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x5, 0x7ff}, 0x10, r5, r2, 0x4, &(0x7f0000001100)=[0xffffffffffffffff, r2], &(0x7f0000001140)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x5}, {0x3, 0x4, 0xd}, {0x0, 0x1, 0x10}], 0x10, 0x6962d8a5}, 0x90) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c80)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000d40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x80}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x68, 0x0, 0x7, 0xfc00, 0x11ad}], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x3, 0x474}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r7, r7, r1, 0xffffffffffffffff, r7], &(0x7f0000000a40)=[{0x0, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x5, 0x10, 0x7}], 0x10, 0x1}, 0x90) close(r4) [ 2072.391601][T19490] FAULT_INJECTION: forcing a failure. [ 2072.391601][T19490] name failslab, interval 1, probability 0, space 0, times 0 [ 2072.426711][T19490] CPU: 0 PID: 19490 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2072.438271][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2072.448164][T19490] Call Trace: [ 2072.451284][T19490] [ 2072.454066][T19490] dump_stack_lvl+0x151/0x1b7 [ 2072.458577][T19490] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2072.464049][T19490] dump_stack+0x15/0x17 [ 2072.468039][T19490] should_fail+0x3c6/0x510 [ 2072.472292][T19490] __should_failslab+0xa4/0xe0 [ 2072.476897][T19490] ? anon_vma_clone+0x9a/0x500 [ 2072.481491][T19490] should_failslab+0x9/0x20 [ 2072.485827][T19490] slab_pre_alloc_hook+0x37/0xd0 [ 2072.490605][T19490] ? anon_vma_clone+0x9a/0x500 [ 2072.495203][T19490] kmem_cache_alloc+0x44/0x200 [ 2072.499810][T19490] anon_vma_clone+0x9a/0x500 [ 2072.504234][T19490] anon_vma_fork+0x91/0x4e0 [ 2072.508574][T19490] ? anon_vma_name+0x43/0x70 [ 2072.512999][T19490] ? vm_area_dup+0x17a/0x230 [ 2072.517423][T19490] copy_mm+0xa3a/0x13e0 [ 2072.521421][T19490] ? copy_signal+0x610/0x610 [ 2072.525840][T19490] ? __init_rwsem+0xd6/0x1c0 [ 2072.530272][T19490] ? copy_signal+0x4e3/0x610 [ 2072.534696][T19490] copy_process+0x1149/0x3290 [ 2072.539211][T19490] ? proc_fail_nth_write+0x20b/0x290 [ 2072.544331][T19490] ? fsnotify_perm+0x6a/0x5d0 [ 2072.548842][T19490] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2072.553789][T19490] ? vfs_write+0x9ec/0x1110 [ 2072.558132][T19490] kernel_clone+0x21e/0x9e0 [ 2072.562466][T19490] ? file_end_write+0x1c0/0x1c0 [ 2072.567158][T19490] ? create_io_thread+0x1e0/0x1e0 [ 2072.572013][T19490] ? mutex_unlock+0xb2/0x260 [ 2072.576445][T19490] ? __mutex_lock_slowpath+0x10/0x10 [ 2072.581565][T19490] __x64_sys_clone+0x23f/0x290 [ 2072.586164][T19490] ? __do_sys_vfork+0x130/0x130 [ 2072.590848][T19490] ? ksys_write+0x260/0x2c0 [ 2072.595195][T19490] ? debug_smp_processor_id+0x17/0x20 [ 2072.600400][T19490] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2072.606406][T19490] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2072.611870][T19490] do_syscall_64+0x3d/0xb0 [ 2072.616123][T19490] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2072.621855][T19490] RIP: 0033:0x7f3c5e561da9 [ 2072.626105][T19490] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2072.645545][T19490] RSP: 002b:00007f3c5d2e3078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2072.653787][T19490] RAX: ffffffffffffffda RBX: 00007f3c5e68ff80 RCX: 00007f3c5e561da9 [ 2072.661601][T19490] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 2072.669411][T19490] RBP: 00007f3c5d2e3120 R08: 0000000000000000 R09: 0000000000000000 [ 2072.677222][T19490] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 2072.685032][T19490] R13: 000000000000000b R14: 00007f3c5e68ff80 R15: 00007fff895412b8 [ 2072.692852][T19490] 05:20:40 executing program 2: perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0xad, 0x5, 0x8, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000b80)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000079000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6612, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000ffff0000000007000000186700000f000000000000003f000000850000003300000095000000000000002bc348dcbd81442b4b58450e0c6f4605f04f5343bcaf21fb8c8e3ddec7e273a5672036d65aa57d2a21187ea2aad35c097bcfd4d0fca739d9d6bd9199064e25295a60dc6bc539b1ad3c06ef98affeb3c353131761262b05251b7e02723792340577d16aab8630f2405df1bf8dd4b55f8fb9784e262e2d88"], &(0x7f0000000980)='syzkaller\x00', 0x1ff, 0x49, &(0x7f00000009c0)=""/73, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x6, 0x7f, 0x1}, 0x10}, 0x80) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x8, 0xf452}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43405) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xa, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600), 0x10) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r1, 0x8000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="9500000000000000186400000700000000000000010400001800000001000000000000831a93d1009500000200000000850000004c000000c713400001000000"], &(0x7f0000000300)='GPL\x00', 0x7dd6209, 0x4b, &(0x7f00000004c0)=""/75, 0x41000, 0x10, '\x00', 0x0, 0x3, r3, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x0, 0x7ff8}, 0x10, r7, r8, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r0, r9, r10, 0x1, r4]}, 0x80) [ 2072.860642][T19490] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 2072.872192][T19490] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 2072.880436][T19490] CPU: 1 PID: 19490 Comm: syz-executor.3 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 2072.891975][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2072.901871][T19490] RIP: 0010:__rb_erase_color+0x2bd/0xa60 [ 2072.907338][T19490] Code: 89 ef e8 d6 27 2b ff 48 8b 45 d0 49 89 45 00 49 89 c5 48 89 c3 48 83 cb 01 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 a5 27 2b ff 49 89 1e 4c 89 eb 48 c1 [ 2072.926782][T19490] RSP: 0018:ffffc9000252f6a0 EFLAGS: 00010246 [ 2072.932683][T19490] RAX: 0000000000000000 RBX: ffff8881c0000001 RCX: dffffc0000000000 [ 2072.940491][T19490] RDX: ffffffff81a50880 RSI: ffff88810fa614d0 RDI: ffff8881c0000000 [ 2072.948302][T19490] RBP: ffffc9000252f700 R08: ffffffff81a4e940 R09: ffffed1021f4c29e [ 2072.956115][T19490] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11038000000 [ 2072.963934][T19490] R13: ffff8881c0000000 R14: 0000000000000000 R15: ffff8881c0000000 [ 2072.971736][T19490] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2072.980504][T19490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2072.986925][T19490] CR2: 00007f4d154e9f48 CR3: 0000000147cd9000 CR4: 00000000003506a0 [ 2072.994742][T19490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2073.002560][T19490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2073.010363][T19490] Call Trace: [ 2073.013484][T19490] [ 2073.016265][T19490] ? __die_body+0x62/0xb0 [ 2073.020430][T19490] ? die_addr+0x9f/0xd0 [ 2073.024422][T19490] ? exc_general_protection+0x311/0x4b0 [ 2073.029811][T19490] ? asm_exc_general_protection+0x27/0x30 [ 2073.035360][T19490] ? vma_interval_tree_remove+0xae0/0xba0 [ 2073.040914][T19490] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 2073.047173][T19490] ? __rb_erase_color+0x2bd/0xa60 [ 2073.052024][T19490] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 2073.058275][T19490] vma_interval_tree_remove+0xb82/0xba0 [ 2073.063658][T19490] unlink_file_vma+0xd9/0xf0 [ 2073.068079][T19490] free_pgtables+0x13f/0x280 [ 2073.072507][T19490] exit_mmap+0x3e7/0x6f0 [ 2073.076585][T19490] ? exit_aio+0x25e/0x3c0 [ 2073.080749][T19490] ? vm_brk+0x30/0x30 [ 2073.084571][T19490] ? mutex_unlock+0xb2/0x260 [ 2073.089000][T19490] ? uprobe_clear_state+0x2cd/0x320 [ 2073.094030][T19490] __mmput+0x95/0x310 [ 2073.097858][T19490] mmput+0x5b/0x170 [ 2073.101495][T19490] do_exit+0xb9c/0x2ca0 [ 2073.105485][T19490] ? task_work_run+0x129/0x190 [ 2073.110090][T19490] ? exit_to_user_mode_loop+0xc4/0xe0 [ 2073.115301][T19490] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 2073.120768][T19490] ? put_task_struct+0x80/0x80 [ 2073.125366][T19490] ? cgroup_freezing+0x88/0xb0 [ 2073.129962][T19490] do_group_exit+0x141/0x310 [ 2073.134392][T19490] get_signal+0x7a3/0x1630 [ 2073.138648][T19490] arch_do_signal_or_restart+0xbd/0x1680 [ 2073.144112][T19490] ? rcu_gp_kthread_wake+0x90/0x90 [ 2073.149058][T19490] ? security_file_free+0xc6/0xe0 [ 2073.153921][T19490] ? kmem_cache_free+0x116/0x2e0 [ 2073.158690][T19490] ? percpu_counter_add_batch+0x13d/0x160 [ 2073.164245][T19490] ? get_sigframe_size+0x10/0x10 [ 2073.169018][T19490] ? __se_sys_futex+0x37b/0x3e0 [ 2073.173703][T19490] ? ____fput+0x15/0x20 [ 2073.177696][T19490] exit_to_user_mode_loop+0xa0/0xe0 [ 2073.182731][T19490] exit_to_user_mode_prepare+0x5a/0xa0 [ 2073.188029][T19490] syscall_exit_to_user_mode+0x26/0x160 [ 2073.193405][T19490] do_syscall_64+0x49/0xb0 [ 2073.197660][T19490] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2073.203386][T19490] RIP: 0033:0x7f3c5e561da9 [ 2073.207640][T19490] Code: Unable to access opcode bytes at RIP 0x7f3c5e561d7f. [ 2073.214845][T19490] RSP: 002b:00007f3c5d2e3178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2073.223087][T19490] RAX: fffffffffffffe00 RBX: 00007f3c5e68ff88 RCX: 00007f3c5e561da9 [ 2073.230898][T19490] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c5e68ff88 [ 2073.238710][T19490] RBP: 00007f3c5e68ff80 R08: 00007f3c5d2e36c0 R09: 00007f3c5d2e36c0 [ 2073.246524][T19490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c5e68ff8c [ 2073.254420][T19490] R13: 000000000000000b R14: 00007fff895411d0 R15: 00007fff895412b8 [ 2073.262237][T19490] [ 2073.265095][T19490] Modules linked in: [ 2073.618571][T19490] ---[ end trace 4b692827a8bbabb9 ]--- [ 2073.633239][T19490] RIP: 0010:__rb_erase_color+0x2bd/0xa60 [ 2073.663038][T19490] Code: 89 ef e8 d6 27 2b ff 48 8b 45 d0 49 89 45 00 49 89 c5 48 89 c3 48 83 cb 01 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 a5 27 2b ff 49 89 1e 4c 89 eb 48 c1 [ 2073.686134][T19490] RSP: 0018:ffffc9000252f6a0 EFLAGS: 00010246 [ 2073.693309][T19490] RAX: 0000000000000000 RBX: ffff8881c0000001 RCX: dffffc0000000000 [ 2073.713956][T19490] RDX: ffffffff81a50880 RSI: ffff88810fa614d0 RDI: ffff8881c0000000 [ 2073.721839][T19490] RBP: ffffc9000252f700 R08: ffffffff81a4e940 R09: ffffed1021f4c29e [ 2073.729654][T19490] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11038000000 [ 2073.737462][T19490] R13: ffff8881c0000000 R14: 0000000000000000 R15: ffff8881c0000000 [ 2073.745262][T19490] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2073.754082][T19490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2073.760594][T19490] CR2: 0000001b2c929000 CR3: 00000001c6f28000 CR4: 00000000003506b0 [ 2073.769602][T19490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2073.785078][T19490] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2073.792964][T19490] Kernel panic - not syncing: Fatal exception [ 2073.798996][T19490] Kernel Offset: disabled [ 2073.803122][T19490] Rebooting in 86400 seconds..